Security Advisory - Multiple Vulnerabilities in MTK Platform

There are multiple vulnerabilities in MTK platform used in Huawei smart phones. There is a integer overflow vulnerability in MTK platform used in Huawei smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to escalate...

Security Advisory - DoS Vulnerability in Multiple Huawei Products

There is a DoS vulnerability in some Huawei products. Since the device does not validate the parameters in a certain command, an attacker with certain permissions could log in and deliver the command containing a malicious parameter to make the device restart. Vulnerability ID: HWPSIRT-2016-06064...

Security Advisory - Weak Encryption Vulnerability in the OceanStor ReplicationDirector

OceanStor ReplicationDirector is designed to manage disaster recovery DR service of data centers DC for enterprises. Huawei OceanStor ReplicationDirector has weak encryption vulnerability. An attacker may exploit it to craft server certificate signatures. Vulnerability ID: HWPSIRT-2016-05156 Huaw...

Security Advisory - Command Injection Vulnerability in OpsMonitor

There is a command injection vulnerability in OpsMonitor service. Due to lack of validation of user input, an authenticated user may inject malicious command into the affected products, causing command execution with root privilege in OpsMonitor service. Vulnerability ID: HWPSIRT-2017-10062 Huawe...

Security Advisory - Sensitive Information Disclosure Vulnerability on FusionSphere OpenStack

There is a sensitive information disclosure vulnerability on FusionSphere OpenStack. The software stores some sensitive information with insufficient access control. An unauthenticated remote attacker could get sensitive information by accessing certain ports. Vulnerability ID: HWPSIRT-2017-06223...

Security Advisory - Input Validation Vulnerability in Wi-Fi Driver of Huawei Smart Phones

There is an input validation vulnerability in the Wi-Fi Driver of some Huawei smart phones. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. Vulnerability ID:...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-64643 This vulnerability has been assigned a CVE ID: CVE-2024-58255...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-34444 This vulnerability has been assigned a CVE ID:CVE-2024-58256...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-23552 This vulnerability has been assigned a CVE ID: CVE-2024-58257...