Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5220 State: PUBLISHED Published: 2019-07-10T17:38:15 Last Updated: 2024-08-04T19:47:56.819Z Vendors: Huawei Products: Mate 20 X, Mate 20, Honor Magic 2 Problem Types: FRP Bypass Description: There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Ton
); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en
CVE ID: CVE-2019-5221 State: PUBLISHED Published: 2019-07-10T17:43:23 Last Updated: 2024-08-04T19:47:56.787Z Vendors: Huawei Products: Mate 20 X Problem Types: Path Traversal Description: There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected products: Mate 20 X versions earlier than Ever-L29B 9.1.0.300(C432E3R1P12), versions earlier than Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1). Additional Analyst Notes: -
Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190703-01-share-en
CVE ID: CVE-2019-5222 State: PUBLISHED Published: 2019-07-17T21:38:57 Last Updated: 2024-08-04T19:47:56.711Z Vendors: n/a Products: Honor Magic 2 Problem Types: information disclosure Description: There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en
CVE ID: CVE-2019-5223 State: PUBLISHED Published: 2019-08-13T20:33:36 Last Updated: 2024-08-04T19:47:56.691Z Vendors: Huawei Products: PC Manager Problem Types: improper authentication Description: PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190718-01-pcmanager-en
CVE ID: CVE-2019-5224 State: PUBLISHED Published: 2019-11-29T19:15:57 Last Updated: 2024-08-04T19:47:56.736Z Vendors: n/a Products: P30 Problem Types: out of bounds read Description: P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause out of bounds read and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-03-smartphone
VE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-03-smartphone-en
CVE ID: CVE-2019-5225 State: PUBLISHED Published: 2019-11-29T19:01:17 Last Updated: 2024-08-04T19:47:56.746Z Vendors: n/a Products: P30, Mate 20, P30 Pro Problem Types: buffer overflow Description: P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12) have a buffer overflow vulnerability on several , the system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution. A
attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-02-smartphone-en
CVE ID: CVE-2019-5226 State: PUBLISHED Published: 2019-11-29T18:57:30 Last Updated: 2024-08-04T19:47:56.805Z Vendors: n/a Products: P30, P30 Pro, Mate 20, HiSuite Problem Types: version downgrade Description: P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1) and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade vulnerability. The device and HiSuite software do not validate the upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version. Additional Analyst
upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190904-01-smartphone-en
CVE ID: CVE-2019-5227 State: PUBLISHED Published: 2019-11-29T19:24:05 Last Updated: 2024-08-04T19:47:56.916Z Vendors: n/a Products: P30, P30 Pro, Mate 20, HiSuite Problem Types: version downgrade Description: P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1) and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade vulnerability. The device and HiSuite software do not validate the upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version. Additional Analyst
CVE ID: CVE-2019-5228 State: PUBLISHED Published: 2019-11-12T22:42:29 Last Updated: 2024-08-04T19:47:56.897Z Vendors: n/a Products: P30, P30 Pro, Honor V20 Problem Types: Race Condition Description: Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12), Versions earlier than Princeton-AL10B 9.1.0.233(C00E233R4P3) have a race condition vulnerability. The system does not lock certain function properly, when the function is called by multiple processes could cause out of bound write. An attacker tricks the user into installing a malicious application, successful exp
sses could cause out of bound write. An attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-smartphone-en
CVE ID: CVE-2019-5229 State: PUBLISHED Published: 2019-11-12T22:51:18 Last Updated: 2024-08-04T19:47:56.678Z Vendors: n/a Products: P30 Problem Types: Insufficient Verification Description: P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en
CVE ID: CVE-2019-5230 State: PUBLISHED Published: 2019-11-12T23:05:04 Last Updated: 2024-08-04T19:47:56.787Z Vendors: n/a Products: P20 Pro, P20, Mate RS Problem Types: Improper Validation Description: P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validation vulnerability. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get a
er to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get and tamper certain output data information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-03-smartphone-en
CVE ID: CVE-2019-5231 State: PUBLISHED Published: 2019-11-12T23:09:17 Last Updated: 2024-08-04T19:47:56.893Z Vendors: n/a Products: P30 Problem Types: Improper Authorization Description: P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190930-01-smartphone-en
CVE ID: CVE-2019-5232 State: PUBLISHED Published: 2019-11-29T19:42:52 Last Updated: 2024-08-04T19:47:56.679Z Vendors: n/a Products: VP9630, VP9650, VP9660 Problem Types: Use of Insufficiently Random Values Description: There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-viewpoint-en
CVE ID: CVE-2019-5233 State: PUBLISHED Published: 2019-11-12T23:11:40 Last Updated: 2024-08-04T19:47:56.817Z Vendors: n/a Products: Taurus-AL00B Problem Types: Improper Authentication Description: Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an improper authentication vulnerability. Successful exploitation may cause the attacker to access specific components. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-smartphone-en
CVE ID: CVE-2019-5235 State: PUBLISHED Published: 2019-12-13T23:09:32 Last Updated: 2024-08-04T19:47:56.874Z Vendors: n/a Products: Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B Problem Types: null pointer dereference Description: Some Huawei smart phones have a null p
VOGUE-LGRP2-OVS, VOGUE-TL00B Problem Types: null pointer dereference Description: Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en
CVE ID: CVE-2019-5236 State: PUBLISHED Published: 2019-08-08T16:26:42 Last Updated: 2024-08-04T19:47:56.831Z Vendors: Huawei Products: Emily-L29C Problem Types: double free Description: Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An attacker can trick a user to click a URL to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190807-01-smartphone-en
CVE ID: CVE-2019-5237 State: PUBLISHED Published: 2019-08-08T16:49:05 Last Updated: 2024-08-04T19:47:56.705Z Vendors: Huawei Products: PCManager Problem Types: code execution Description: Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190710-01-pcmanager-en
CVE ID: CVE-2019-5238 State: PUBLISHED Published: 2019-08-08T16:50:11 Last Updated: 2024-08-04T19:47:56.804Z Vendors: Huawei Products: PCManager Problem Types: code execution Description: Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190710-01-pcmanager-en
CVE ID: CVE-2019-5239 State: PUBLISHED Published: 2019-08-08T16:51:16 Last Updated: 2024-08-04T19:47:56.818Z Vendors: Huawei Products: PCManager Problem Types: information leak Description: Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have an information leak vulnerability. Successful exploitation may cause the attacker to read information. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190710-01-pcmanager-en
CVE ID: CVE-2019-5241 State: PUBLISHED Published: 2019-06-06T14:24:47 Last Updated: 2024-08-04T19:47:56.893Z Vendors: Huawei Products: PCManager Problem Types: privilege escalation Description: There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190109-01-pcmanager-en
CVE ID: CVE-2019-5242 State: PUBLISHED Published: 2019-06-06T14:26:18 Last Updated: 2024-08-04T19:47:57.023Z Vendors: Huawei Products: PCManager Problem Types: code execution Description: There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190109-01-pcmanager-en
CVE ID: CVE-2019-5243 State: PUBLISHED Published: 2019-06-10T14:34:36 Last Updated: 2024-08-04T19:47:56.799Z Vendors: n/a Products: HG255s Problem Types: Clickjacking vulnerability Description: There is a Clickjacking vulnerability in Huawei HG255s product. An attacker may trick user to click a link and affect the integrity of a device by exploiting this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://utkusen.com/advisories/CVE-2019-5243.txt - https://support.huawei.com/carrier/navi?lang=en&coltype=software#col=software&detailId=PBI1-22976324&path=PBI1-7275726/PBI1-7275742/PBI1-22892608/PBI1-22903845/PBI1-21219153&lang=en
CVE ID: CVE-2019-5244 State: PUBLISHED Published: 2019-06-04T17:54:19 Last Updated: 2024-08-04T19:47:56.745Z Vendors: Huawei Products: Mate 9 Pro Problem Types: information leak Description: Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-informationleak-en
CVE ID: CVE-2019-5245 State: PUBLISHED Published: 2019-06-13T15:41:16 Last Updated: 2024-08-04T19:47:56.718Z Vendors: n/a Products: HiSuite Problem Types: DLL hijacking Description: HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190612-01-dllhijacking-en
CVE ID: CVE-2019-5246 State: PUBLISHED Published: 2019-11-12T23:14:53 Last Updated: 2024-08-04T19:47:56.917Z Vendors: n/a Products: ELLE-AL00B Problem Types: Insufficient Verification Description: Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack. Successful exploit could cause DOS or malicious code execution. Additional Analyst Notes: - CVE
ge to launch the attack. Successful exploit could cause DOS or malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-codeexecution-en
CVE ID: CVE-2019-5247 State: PUBLISHED Published: 2019-11-29T20:05:45 Last Updated: 2024-08-04T19:47:56.789Z Vendors: n/a Products: Atlas 300, Atlas 500 Problem Types: Buffer Overflow Description: Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-atlas-en
CVE ID: CVE-2019-5248 State: PUBLISHED Published: 2019-12-13T14:43:32 Last Updated: 2024-08-04T19:47:56.861Z Vendors: n/a Products: CloudEngine 12800 Problem Types: Denial of Service Description: CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit this vulnerability to cause DoS attacks on the target device. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en
CVE ID: CVE-2019-5250 State: PUBLISHED Published: 2019-12-13T14:24:20 Last Updated: 2024-08-04T19:47:56.631Z Vendors: n/a Products: Mate 20 Pro Problem Types: Improper Authorization Description: Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on student mode function. Successful exploit could allow the attacker to bypass the limit of student mode function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/ps
of student mode function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-02-smartphone-en
CVE ID: CVE-2019-5251 State: PUBLISHED Published: 2019-12-13T14:30:18 Last Updated: 2024-08-04T19:47:56.813Z Vendors: n/a Products: Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s Problem Types: Path Traversal Description: There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-en
CVE ID: CVE-2019-5252 State: PUBLISHED Published: 2019-12-13T23:12:50 Last Updated: 2024-08-04T19:47:56.878Z Vendors: n/a Products: Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro Problem Types: Improper Authentication Description: There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en
CVE ID: CVE-2019-5253 State: PUBLISHED Published: 2019-12-13T21:25:46 Last Updated: 2024-08-04T19:47:56.894Z Vendors: n/a Products: E5572-855 Problem Types: Improper Authentication Description: E5572-855 with versions earlier than 8.0.1.3(H335SP1C233) has an improper authentication vulnerability. The device does not perform a sufficient authentication when doing certain operations, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-04-dos-en
CVE ID: CVE-2019-5254 State: PUBLISHED Published: 2019-12-13T22:51:29 Last Updated: 2024-08-04T19:47:56.865Z Vendors: n/a Products: AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 Problem Types: out-of-bounds read Description: Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have an out-of-bounds read vulnerability. An attacker who logs in to the board may send crafted messages fr
Space U1981) have an out-of-bounds read vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en