CVE-2016-8786

CVE-2016-8786 affects multiple Huawei routing switches (e.g., S12700, S5700, S6700, S7700, S9700) across V200R005C00 to V200R008C00 revisions. The flaw is in RSVP packet handling due to insufficient input validation, enabling a remote attacker to trigger buffer overflows and cause occasional rebo...

Remote code execution

Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...

CVE-2017-17221

CVE-2017-17221 affects Huawei eSpace devices (7950 V200R003C30 and 8950 V200R003C00; V200R003C30). The issue is a remote code execution vulnerability in the Import Signal Tone function triggered after a signal tone is uploaded, caused by insufficient verification of received packets. An authentic...

CVE-2017-17223

Huawei eSpace 7910, 7950, and 8950 devices (V200R003C30/0: eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00/0; V200R003C30) are affected by a directory traversal vulnerability. An authenticated, remote attacker can craft a specific URL, exploiting insufficient URL verific...

Design/Logic Flaw

SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C2...

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

Huawei eSpace Desktop V200R003C00 has multiple untrusted search path vulnerabilities

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. Multiple untrusted search path vulnerabilities exist in versions prior to Huawei eSpace Desktop V200R003C00, which allow local users to execute arbitrary code and perform DLL hijacking attacks via the Trojan horse...

CVE-2014-9416

Huawei eSpace Desktop (pre-V200R003C00) is affected by DLL Hijacking involving mfc71enu.dll, mfc71loc.dll, tcapi.dll and airpcap.dll. The vulnerability, described as untrusted search path leading to arbitrary code execution, relies on loading these libraries via Trojan-horse scenarios. Multiple C...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...