CVE-2017-17293

CVE-2017-17293 affects Huawei AR/SRG products (e.g., AR120-S, AR1200, AR150, AR200, AR2200, SRG1300/2300/3300, TE/DP300, MAX PRESENCE, NetEngine, RP200, etc.). A crafted XML file can be submitted to vulnerable devices, exploiting insufficient input validation to trigger a buffer overflow. An auth...

CVE-2017-17294

CVE-2017-17294 describes a null pointer dereference in a broad set of Huawei enterprise router products (e.g., AR-series and SRG/NetEngine lines) caused by insufficient input validation when processing a crafted XML file. An authenticated, local attacker can trigger this by uploading a tailored X...

CVE-2017-15331

CVE-2017-15331 corresponds to an out-of-bounds read vulnerability in the H323 protocol affecting a wide range of Huawei products (AR, ARS/RG series, NIP6300/6600, Secospace USG, ViewPoint 9030, and related platforms). The issue arises from insufficient verification of H323 messages, allowing an u...

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

CVE-2017-17292

CVE-2017-17292 affects Huawei AR/X routers (e.g., AR120-S/AR200/AR3200, SRG/Te series, etc.) and related hardware listed in the CVE description. The vulnerability is a denial-of-service caused by improper handling of input when processing a crafted XML file uploaded to the affected module by an a...

CVE-2017-8199

CVE-2017-8199 affects Huawei MAX PRESENCE V100R001C00 and Panorama SmartPresence TP3106 V100R002C00, TP3206 V100R002C00. The vulnerability is an out-of-bounds read in the H323 protocol, with exploitation requiring user authentication and sending crafted packets, potentially causing the affected p...

CVE-2017-8200

CVE-2017-8200 affects Huawei MAX PRESENCE V100R001C00, TP3106 V100R002C00, and TP3206 V100R002C00 through an out-of-bounds read in the H323 protocol. The root cause is insufficient verification of crafted H323 packets, requiring an attacker to log in as a user to induce a reboot of the affected p...

CVE-2017-8201

CVE-2017-8201 affects Huawei MAX PRESENCE V100R001C00, TP3106 V100R002C00, and TP3206 V100R002C00. The issue is a memory leak in the H323 protocol caused by insufficient verification of crafted packets sent by an authenticated user, leading to potential DoS via exhaustion of memory. The vulnerabi...

CVE-2017-17291

CVE-2017-17291 is a memory-leak vulnerability in a wide range of Huawei enterprise devices (e.g., AR/AR1200/AR3200/SRG/NetEngine lines, TE/DP300/MAX PRESENCE, etc.). The issue arises when parsing crafted XML files: the software fails to free allocated memory, leading to a memory leak. An authenti...