CVE-2019-19416

The CVE-2019-19416 issue concerns the SIP module in Huawei products. The vulnerability stems from insufficient verification of SIP packets, allowing a remote attacker to trigger a buffer overflow and a dead loop, resulting in a denial-of-service condition. Affected products are listed in Huawei’s...

CVE-2017-17257

CVE-2017-17257 is a memory-leak vulnerability in the H323 protocol affecting Huawei devices (e.g., AR120-S, AR1200, AR150/150-S, AR160, AR200/200-S, AR2200/2200-S, AR3200, AR3600, Secospace USG family, ViewPoint devices, and related lines). The issue arises from insufficient verification of H323 ...

CVE-2017-17137

Huawei PEM module vulnerability CVE-2017-17137 is an Out-of-Bounds memory access issue caused by insufficient verification. An authenticated local attacker can trigger processing crashes by presenting a malicious certificate, resulting in denial of service. Affected products include PEM module ac...

CVE-2017-17256

CVE-2017-17256 affects Huawei H323 protocol across multiple AR and related Huawei products. An unauthenticated, remote attacker can send malformed H323 packets, and due to insufficient packet verification a memory leak may occur, potentially causing DoS. Public details in Huawei HWPSIRT advisory ...

CVE-2019-19417

CVE-2019-19417 (and related CVEs CVE-2019-19415/19416) describe three DoS vulnerabilities in the SIP module of some Huawei products. The root cause is insufficient verification of SIP packets, which can cause buffer overflow and a dead loop, enabling a remote attacker to trigger a DoS condition o...

CVE-2017-17258

The CVE-2017-17258 issue is a resource management vulnerability in Huawei’s H323 protocol. An unauthenticated, remote attacker can craft malformed H323 packets that, due to insufficient validation, may cause memory exhaustion and a process crash on affected devices (e.g., AR120-S/AR1200/AR150/AR2...

CVE-2017-17135

CVE-2017-17135 is a null pointer reference vulnerability in the PEM module of Huawei products, including DP300 family, IPS, NGFW, NIP, S-series, Secospace USG, ViewPoint, TE, TP, USG9500, and related models, due to insufficient verification. An authenticated local attacker can call the PEM decode...

CVE-2017-17167

CVE-2017-17167 affects Huawei DP300 (V500R002C00), TP3206 (V100R002C00), and ViewPoint 9030 (V100R011C02/V100R011C03) due to use of a broken or risky cryptographic algorithm in SSL. The root cause is reliance on weak crypto algorithms for SSL, enabling a remote unauthenticated attacker to potenti...

CVE-2017-17254

This CVE-2017-17254 is a Huawei H323 protocol null pointer dereference vulnerability affecting a broad range of Huawei devices (e.g., AR120S/AR1200/AR150/AR200 families and related platforms). An unauthenticated, remote attacker can craft malformed H323 packets and send them to affected devices, ...

CVE-2017-17296

CVE-2017-17296 describes a memory leak vulnerability in Huawei products (e.g., AR120-S/AR1200/AR150 family and others) caused by not freeing allocated memory when handling H323 packages. An unauthenticated remote attacker can send crafted H323 messages, potentially causing memory leakage and serv...

CVE-2017-17251

CVE-2017-17251 is a Huawei H323 protocol null pointer dereference vulnerability affecting multiple Huawei devices (e.g., AR120-S/AR1200/AR150/AR200-series, DR modules, Secospace USG, ViewPoint, etc.). Root cause: insufficient validation of H323 packets leading to a null pointer dereference and po...

CVE-2019-19415

CVE-2019-19415 (and related CVEs 19416/19417) affect the SIP module in some Huawei products. The DoS vulnerabilities arise from three issues where insufficient packet verification can lead to a buffer overflow and a dead loop, exploitable remotely by sending specially crafted messages to affected...

CVE-2017-17144

The CVE-2017-17144 issue affects Huawei SIP module backups on multiple products (e.g., DP300/TE-series, ViewPoint, eSpace, etc.). The vulnerability is an overflow in the SIP backup feature when the module processes a specific amount of state, which the module cannot handle, resulting in a denial ...

CVE-2017-17252

CVE-2017-17252 corresponds to an out-of-bounds read vulnerability in Huawei UTP/H323 protocol support affecting a broad set of Huawei AR/AR- series and related devices (e.g., AR120-S/AR1200/AR150/AR200, ViewPoint/Secospace lines). An unauthenticated remote attacker can send malformed H323 packets...

CVE-2017-17297

CVE-2017-17297 corresponds to a buffer overflow vulnerability affecting Huawei devices such as AR120-S, AR1200/AR1200-S, AR150/AR150-S, AR160, AR200/AR200-S, AR2200/AR2200-S, AR3200, AR3600, and related modules (e.g., IPS, NGFW, NetEngine family) across multiple firmware versions (e.g., V200R006C...

CVE-2017-15331

CVE-2017-15331 corresponds to an out-of-bounds read vulnerability in the H323 protocol affecting a wide range of Huawei products (AR, ARS/RG series, NIP6300/6600, Secospace USG, ViewPoint 9030, and related platforms). The issue arises from insufficient verification of H323 messages, allowing an u...

CVE-2017-17142

CVE-2017-17142 is an overflow vulnerability in the SIP module of Huawei devices (e.g., Huawei DP300, RP200, RSE6500, TE3x/TE6x, ViewPoint 9030, eSpace U1960/U1981, among others). An attacker can exploit it by sending a specially crafted SIP message, causing a process to reboot at random and impac...

CVE-2017-2722

CVE-2017-2722 concerns an input validation vulnerability across multiple Huawei products (e.g., DP300, TP3106, ViewPoint 9030, eSpace series, eSpace U1981, eSpace IAD, eSpace 7950, etc.). The issue, described in the initial CVE entry, arises from insufficient input validation, which can be trigge...

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

CVE-2017-15339

The CVE-2017-15339 entry documents a buffer overflow vulnerability in Huawei SIP modules across many devices (e.g., DP300, IPS, NGFW, NIP/N series, USG/SeCOSpace, ViewPoint, Te series). Root cause: insufficient validation of SIP messages, enabling overflow when crafting specific SIP messages. Imp...

CVE-2017-17253

CVE-2017-17253 describes an out-of-bounds read in Huawei’s H323 protocol across multiple Huawei products (e.g., AR120-S/AR1200 series, AR150, AR160, AR200/AR2200/AR3200/AR3600 line, DP300, Secospace USG, ViewPoint devices, etc.). An unauthenticated, remote attacker can craft malformed H323 packet...

CVE-2017-17143

CVE-2017-17143 is a Huawei SIP module overflow vulnerability. The issue occurs when validating certain SIP messages, where the module cannot parse malformed inputs, potentially allowing an attacker to trigger a random process reboot. Affected products include Huawei DP300 family (and related RP20...

CVE-2017-17151

CVE-2017-17151 affects Huawei H323 implementations (e.g., AR100/AR100-S/AR110-S/AR120/AR120-S/AR1200/AR1200-S/AR150/AR150-S/AR160/AR200/AR200-S/AR2200/AR2200-S/AR3200/AR510/DP300/NetEngine16EX/RP200/SRG1300/SRG2300/SRG3300/TE30/TE40/TE50/TE60/TP3106/TP3206/ViewPoint 8660/ViewPoint 9030). The root...

CVE-2017-15336

CVE-2017-15336 corresponds to buffer overflow vulnerabilities in the SIP backup feature across Huawei devices (DP300 and a broad range of modules and platforms including IPS, NGFW, NIP6300/6600/6800, RP200, ViewPoint, eSpace U1981, and Secospace USG/TE series). Root cause: insufficient validation...

CVE-2017-17138

CVE-2017-17138 is a DoS in the Huawei PEM module caused by insufficient verification, where an authenticated local attacker can trigger a deadloop by presenting a malicious certificate. Affected Huawei products include DP300, IPS, NGFW, NIP6300/6600, RP200, S-series (S12700, S1700, S2700, S5700, ...

CVE-2017-15323

CVE-2017-15323 describes a DoS due to memory exhaustion from insufficient input validation in several Huawei devices (e.g., DP300, NIP6600, Secospace USG6500, TE60, ViewPoint series, eSpace/U1981, among others). The vulnerability allows an attacker to craft malformed messages to exhaust device me...

CVE-2017-15335

CVE-2017-15335 describes a buffer overflow vulnerability in the SIP backup feature across multiple Huawei devices (DP300, NGFW/IPS modules, USG/Secospace, and related platforms). The root cause is insufficient validation of SIP message values, allowing specially crafted messages to trigger a cras...

CVE-2017-15353

Concrete details exist: CVE-2017-15353 affects Huawei DP300, ViewPoint series and other listed endpoints (e.g., V500R002C00, V600R006C00, TE30/TE40/TE50/TE60, TX50, VP9660, ViewPoint 8660/9030, etc.). Root cause is out-of-bounds read due to insufficient input validation, requiring an attacker to ...

CVE-2017-17255

CVE-2017-17255 is a null pointer dereference vulnerability in Huawei’s H323 protocol across numerous AR/ARS/DP/NIP/NGFW/USG/ViewPoint devices. The root cause is insufficient validation of H323 packets, allowing an unauthenticated, remote attacker to send malformed packets that cause a process cra...

CVE-2017-15337

CVE-2017-15337 affects the SIP module across multiple Huawei products (DP300, IPS, NGFW, NIP, NIP6600/6800, RP200, SVN series, Secospace USG, TE/Views, eSpace U1981, ViewPoint, etc.). The root cause is insufficient validation of SIP messages, leading to a buffer overflow if an attacker crafts spe...

CVE-2017-17136

The CVE-2017-17136 issue is a heap overflow in Huawei’s PEM module across multiple products (e.g., DP300, IPS, NGFW, S series, USG, ViewPoint, etc.). Root cause: insufficient verification in the PEM processing flow, allowing an authenticated local attacker to crash the process by presenting a cra...

CVE-2017-17298

CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...

CVE-2017-17295

CVE-2017-17295 describes buffer overflow vulnerabilities in numerous Huawei products caused by insufficient validation of SIP package values. An unauthenticated, remote attacker may send crafted SIP packages to affected devices (e.g., AR120-S, AR1200, AR150/AR200 families and others listed) to tr...

CVE-2017-15334

CVE-2017-15334 pertains to a buffer overflow in the SIP backup feature across many Huawei products (DP300, multiple modules and devices). The root cause is insufficient validation of certain SIP message values, allowing an attacker to send specially crafted messages to trigger a service abnormali...

CVE-2017-15338

CVE-2017-15338 concerns buffer overflow in the SIP module of Huawei products (DP300, various SIP backup-related modules and related devices such as NIP, NGFW, USG, ViewPoint, eSpace U1981, etc.). The root cause is insufficient validation of SIP messages, requiring an attacker to craft specific me...

CVE-2017-17290

CVE-2017-17290 affects Huawei TE60 (V600R006C00) and ViewPoint 9030 (V100R011C02/C03) LDAP clients. The issue is a resource management error in handling LDAP connections, allowing an unauthenticated remote attacker to make the LDAP server stop responding by controlling LDAP server behavior, poten...