CVE-2019-19416

The CVE-2019-19416 issue concerns the SIP module in Huawei products. The vulnerability stems from insufficient verification of SIP packets, allowing a remote attacker to trigger a buffer overflow and a dead loop, resulting in a denial-of-service condition. Affected products are listed in Huawei’s...

CVE-2017-2690

CVE-2017-2690 affects Huawei SoftCo and eSpace devices: SoftCo with V200R003C20; eSpace U1910 (V200R003C00, C20); U1911 (C20, C30); U1930 (C20, C30); U1960 (C20, C30); U1980 (C20, C30); U1981 (C20, C30). A DoS can be triggered by an attacker with specific permission who crafts a file containing m...

CVE-2019-19417

CVE-2019-19417 (and related CVEs CVE-2019-19415/19416) describe three DoS vulnerabilities in the SIP module of some Huawei products. The root cause is insufficient verification of SIP packets, which can cause buffer overflow and a dead loop, enabling a remote attacker to trigger a DoS condition o...

CVE-2019-19415

CVE-2019-19415 (and related CVEs 19416/19417) affect the SIP module in some Huawei products. The DoS vulnerabilities arise from three issues where insufficient packet verification can lead to a buffer overflow and a dead loop, exploitable remotely by sending specially crafted messages to affected...

CVE-2017-17174

The CVE-2017-17174 entry corresponds to a weak algorithm vulnerability in multiple Huawei products (eSpace U1981, RSE6500, SoftCo, VP9660, etc.). An attacker who can observe TLS traffic between clients and affected devices could perform a Bleichenbacher attack on RSA key exchange to decrypt the s...