CVE-2017-17290

The Light Directory Access Protocol LDAP clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by...

CVE-2017-17298

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Buffer overflow

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Design/Logic Flaw

The Light Directory Access Protocol LDAP clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by...

Buffer overflow

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...

Buffer overflow

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...

Memory corruption

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-17295

CVE-2017-17295 describes buffer overflow vulnerabilities in numerous Huawei products caused by insufficient validation of SIP package values. An unauthenticated, remote attacker may send crafted SIP packages to affected devices (e.g., AR120-S, AR1200, AR150/AR200 families and others listed) to tr...

CVE-2017-17290

CVE-2017-17290 affects Huawei TE60 (V600R006C00) and ViewPoint 9030 (V100R011C02/C03) LDAP clients. The issue is a resource management error in handling LDAP connections, allowing an unauthenticated remote attacker to make the LDAP server stop responding by controlling LDAP server behavior, poten...

CVE-2017-15353

Concrete details exist: CVE-2017-15353 affects Huawei DP300, ViewPoint series and other listed endpoints (e.g., V500R002C00, V600R006C00, TE30/TE40/TE50/TE60, TX50, VP9660, ViewPoint 8660/9030, etc.). Root cause is out-of-bounds read due to insufficient input validation, requiring an attacker to ...

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

CVE-2017-15336

CVE-2017-15336 corresponds to buffer overflow vulnerabilities in the SIP backup feature across Huawei devices (DP300 and a broad range of modules and platforms including IPS, NGFW, NIP6300/6600/6800, RP200, ViewPoint, eSpace U1981, and Secospace USG/TE series). Root cause: insufficient validation...

CVE-2017-17298

CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...

CVE-2017-17290

The Light Directory Access Protocol LDAP clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by...

Huawei DP300, TP3206 and ViewPoint 9030 Weak Encryption Algorithm Vulnerability

Huawei DP300, TP3206 and ViewPoint 9030 are all products of Huawei, China.DP300 is a video conferencing endpoint.TP3206 is a panoramic video conferencing solution.ViewPoint 9030 is a multipoint control unit for video conferencing systems. A weak encryption algorithm vulnerability exists in the...

Multiple Huawei Products Resource Management Error Vulnerability

The Huawei TE60 is an HD video conferencing endpoint that supports 1080p60. The ViewPoint 9030 is a split-type economical HD group video endpoint. A resource management error vulnerability exists in several Huawei products as LDAP clients due to the client failing to respond correctly to resource...

Huawei ViewPoint 8660 Memory Disclosure Vulnerability

Huawei ViewPoint 8660 is a multipoint control unit for conference TV systems from Huawei, China. A memory leak vulnerability exists in Huawei ViewPoint 8660 version V100R008C03, which originates from the device not reasonably freeing memory when parsing XML Schema. An attacker could exploit the...

Multiple Huawei products cross the border to read vulnerabilities

Huawei DP300, RP200, RSE6500, TX50, VP9660, TE series and ViewPoint series are Huawei's all-in-one desktop and HD video conferencing end products for high-end customers. An out-of-bounds read vulnerability exists in multiple Huawei products, due to the device failing to adequately validate user...

Arbitrary Code Execution Vulnerability in Multiple Dell Products

Dell SonicWALL GMSGMS is a global management system for rapid deployment and centralized management of SonicWALL infrastructures.Analyzer is a set of network analyzer software for SonicWALL infrastructures.UMA EM5000 is a set of universal management appliance software.GMS ViewPoint GMSVP web...

Multiple Dell Products Arbitrary Command Execution Vulnerability

Dell SonicWALL GMSGMS is a global management system for rapid deployment and centralized management of SonicWALL infrastructures.Analyzer is a set of network analyzer software for SonicWALL infrastructures.UMA EM5000 is a set of universal management appliance software.GMS ViewPoint GMSVP web...