CVE-2016-8786

CVE-2016-8786 affects multiple Huawei routing switches (e.g., S12700, S5700, S6700, S7700, S9700) across V200R005C00 to V200R008C00 revisions. The flaw is in RSVP packet handling due to insufficient input validation, enabling a remote attacker to trigger buffer overflows and cause occasional rebo...

CVE-2017-15329

Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...

CVE-2017-15329

Huawei UMA Product vulnerability CVE-2017-15329 is a SQL injection in the operation and maintenance module of UMA V200R001C00 due to insufficient input validation of HTTP requests. An attacker authenticated as a regular user can send crafted requests to execute arbitrary SQL queries. Public refer...

CVE-2017-15329: Improper Neutralization of Special Elements used in an SQL Command

Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...