Huawei VRP Default Credentials (SSH)

The remote Huawei Versatile Routing Platform VRP device is using known default credentials for the SSH login. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Huawei VRP Default Credentials (HTTP)

The remote Huawei Versatile Routing Platform VRP device is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Huawei VRP Detection (SSH Login)

SSH login-based detection of Huawei Versatile Routing Platform VRP network devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Huawei VRP Detection (HTTP)

HTP based detection of Huawei Versatile Routing Platform VRP devices. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Huawei Versatile Routing Platform (VRP) Detection Consolidation

Consolidation of Huawei Versatile Routing Platform VRP network device detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-14417

Veritas Resiliency Platform (VRP) prior to 3.4 HF1 contains an arbitrary command execution vulnerability in its DNS-related functionality that lets a malicious VRP user run commands with root privileges inside the VRP VM. Affected software is VRP before 3.4 HF1; the underlying issue is tied to DN...

CVE-2019-14416

The CVE concerns Veritas Resiliency Platform (VRP) prior to version 3.4 HF1. A vulnerability allows an authenticated VRP user to execute arbitrary commands with root privileges inside the VRP virtual machine, linked to resiliency plans and the custom script functionality. Affected component: VRP ...

CVE-2019-14415

Summary: CVE-2019-14415 affects Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious VRP user to inject script into another user’s browser when a victim opens a resiliency plan the attacker can access. The issue is tied to the ...

Huawei Denial-of-Service Vulnerability

The remote Huawei product is affected by a denial-of-service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid117394; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Input validation

Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using...

CVE-2016-8785

Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using...

CVE-2016-8785

Huawei VRP-based devices (S12700, S5700, S7700, S9700) running listed V200R0xx releases have an input validation vulnerability: malformed VRP packets can trigger display of additional memory data, potentially leaking sensitive information. The root cause is lack of input validation in the VRP pla...

CVE-2016-8785

Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using...

vrp-multicartes.fr XSS vulnerability

Open Bug Bounty ID: OBB-567683 Description| Value ---|--- Affected Website:| vrp-multicartes.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-1446

Name of the Vulnerable Software and Affected Versions Intel processors versions prior to the fixed version Huawei VRP affected versions not specified vCenter Server affected versions not specified ESXi affected versions not specified Workstation affected versions not specified Fusion affected...

vrpspeed.com XSS vulnerability

Vulnerable URL:...

Information Disclosure Vulnerability in Multiple Huawei Switches

Huawei S9300 and others are S-series switches from Huawei, a Chinese company. An information disclosure vulnerability exists in several Huawei switches using the VRP platform. An attacker can exploit this vulnerability to disclose network device interface IP address information...

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

CVE-2014-8570

Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S127...

Input validation

Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S127...