Vulnerabilities > Huawei > High

DATE CVE VULNERABILITY TITLE RISK
2018-02-15 CVE-2017-15348 Improper Input Validation vulnerability in Huawei products
Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability.
network
low complexity
huawei CWE-20
7.5
2018-02-15 CVE-2017-15344 Integer Overflow or Wraparound vulnerability in Huawei Ar120-S Firmware, Ar1200 Firmware and Ar3200 Firmware
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability.
network
low complexity
huawei CWE-190
7.5
2018-02-15 CVE-2017-15343 Integer Overflow or Wraparound vulnerability in Huawei Ar120-S Firmware, Ar1200 Firmware and Ar3200 Firmware
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability.
network
low complexity
huawei CWE-190
7.5
2018-02-15 CVE-2017-15342 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability.
network
low complexity
huawei CWE-119
7.5
2018-02-15 CVE-2017-15341 Improper Certificate Validation vulnerability in Huawei products
Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability.
network
low complexity
huawei CWE-295
7.5
2018-02-15 CVE-2017-15329 SQL Injection vulnerability in Huawei UMA Firmware V200R001C00
Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module.
network
low complexity
huawei CWE-89
8.8
2018-01-30 CVE-2014-4705 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
network
low complexity
huawei CWE-119
7.5
2017-12-22 CVE-2017-15328 Information Exposure vulnerability in Huawei Hg8245H Firmware
Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability.
network
low complexity
huawei CWE-200
7.5
2017-12-22 CVE-2017-15324 Improper Input Validation vulnerability in Huawei S5700 Firmware and S6700 Firmware
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets.
network
low complexity
huawei CWE-20
7.5
2017-12-22 CVE-2017-15320 Out-of-bounds Read vulnerability in Huawei products
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products.
network
low complexity
huawei CWE-125
7.5