Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15300 State: PUBLISHED Published: 2017-10-15T08:00:00 Last Updated: 2024-08-05T19:50:16.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port. Additional Analyst Notes: - CVE Program Container: References: - https://www.legacysecuritygroup.com/cve-2017-15300.html - https://bitcointalk.org/index.php?top
Container: References: - https://www.legacysecuritygroup.com/cve-2017-15300.html - https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970
CVE ID: CVE-2017-15302 State: PUBLISHED Published: 2017-10-16T01:00:00 Last Updated: 2024-08-05T19:50:16.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows), including sandboxed users, can issue an ioctl to this driver without any validation. Furthermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that
ermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md
CVE ID: CVE-2017-15303 State: PUBLISHED Published: 2017-10-16T01:00:00 Last Updated: 2024-08-05T19:50:16.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15303/README.md
CVE ID: CVE-2017-15304 State: PUBLISHED Published: 2017-10-15T03:00:00Z Last Updated: 2024-09-16T16:49:04.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change. Additional Analyst Notes: - CVE Program Container: References: - https://www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html
CVE ID: CVE-2017-15305 State: PUBLISHED Published: 2017-10-15T03:00:00Z Last Updated: 2024-09-16T23:05:55.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.recorday.cn/about/xss2.txt - https://github.com/C0der1iu/Nexusphppoc/blob/master/xss2.txt
CVE ID: CVE-2017-15306 State: PUBLISHED Published: 2017-11-06T18:00:00 Last Updated: 2024-08-05T19:50:16.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101693 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11 - https://github.com/torvalds/linux/commit/ac64115a66c18c01745bbd3c47a36b124e5fd8c0 - http://git.
v4.x/ChangeLog-4.13.11 - https://github.com/torvalds/linux/commit/ac64115a66c18c01745bbd3c47a36b124e5fd8c0 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac64115a66c18c01745bbd3c47a36b124e5fd8c0 - http://openwall.com/lists/oss-security/2017/11/06/6
CVE ID: CVE-2017-15307 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T19:14:47.687Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 8 Problem Types: Permission Control Description: Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171030-01-smartphone-en
CVE ID: CVE-2017-15308 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T18:07:47.674Z Vendors: Huawei Technologies Co., Ltd. Products: iReader Problem Types: input validation Description: Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be loaded and run. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en
CVE ID: CVE-2017-15309 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T22:30:58.226Z Vendors: Huawei Technologies Co., Ltd. Products: iReader Problem Types: path traversal Description: Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en
CVE ID: CVE-2017-15310 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T20:21:46.076Z Vendors: Huawei Technologies Co., Ltd. Products: iReader Problem Types: arbitrary file deletion Description: Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en
CVE ID: CVE-2017-15311 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T04:29:33.735Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Problem Types: Stack Overflow Description: The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when t
d malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-en
CVE ID: CVE-2017-15312 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T03:03:13.691Z Vendors: Huawei Technologies Co., Ltd. Products: SmartCare Problem Types: XSS Description: Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en
CVE ID: CVE-2017-15313 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T18:24:49.452Z Vendors: Huawei Technologies Co., Ltd. Products: SmartCare Problem Types: CSV Injection Description: Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker could inject malicious CSV expression to the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en
CVE ID: CVE-2017-15314 State: PUBLISHED Published: 2018-03-09T21:00:00 Last Updated: 2024-08-05T19:50:16.500Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: Memory Leak Description: Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C0
00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability due to memory don't be released when the XML parser process some node fail. An attacker could exploit it to cause memory leak, which may further lead to system exceptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en
CVE ID: CVE-2017-15315 State: PUBLISHED Published: 2018-03-09T21:00:00 Last Updated: 2024-08-05T19:50:16.471Z Vendors: Huawei Technologies Co., Ltd. Products: NIP6300,NIP6600,Secospace USG6300,Secospace USG6500 Problem Types: Memory Leak Description: Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally. Additional Analyst Notes: - CVE Program Conta
he memory leaking happened, which would cause the device to reset finally. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en
CVE ID: CVE-2017-15316 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T17:48:54.343Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9, Mate 9 Pro Problem Types: Memory Double Free Description: The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http:/
uses a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-smartphone-en
CVE ID: CVE-2017-15317 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T03:23:23.187Z Vendors: Huawei Technologies Co., Ltd. Products: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, SRG1300, SRG2300, SRG3300 Problem Types: Input Validation Description: AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V
V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R
C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart. Additional Anal
Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en
CVE ID: CVE-2017-15318 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T16:58:54.555Z Vendors: Huawei Technologies Co., Ltd. Products: RP200, TE30, TE40, TE50, TE60 Problem Types: out-of-bounds read Description: RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read a
sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en
CVE ID: CVE-2017-15319 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T17:33:21.408Z Vendors: Huawei Technologies Co., Ltd. Products: RP200, TE30, TE40, TE50, TE60 Problem Types: out-of-bounds read Description: RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read a
CVE ID: CVE-2017-15320 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T04:03:44.636Z Vendors: Huawei Technologies Co., Ltd. Products: RP200, TE30, TE40, TE50, TE60 Problem Types: out-of-bounds read Description: RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read a
CVE ID: CVE-2017-15321 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T00:36:21.879Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Information Leak Description: Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-fusionsphere-en
CVE ID: CVE-2017-15322 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-17T02:31:10.069Z Vendors: Huawei Technologies Co., Ltd. Products: Baggio-L03A Problem Types: DoS Description: Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en
CVE ID: CVE-2017-15323 State: PUBLISHED Published: 2018-03-09T21:00:00 Last Updated: 2024-08-05T19:50:16.498Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,NIP6600,Secospace USG6500,TE60,TP3106,VP9660,ViewPoint 8660,ViewPoint 9030,eCNS210_TD,eSpace U1981 Problem Types: DoS Description: Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10, eSpace U1981 V200R0
002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10, eSpace U1981 V200R003C30 have a DoS vulnerability caused by memory exhaustion in some Huawei products. For lacking of adequate input validation, attackers can craft and send some malformed messages to the target device to exhaust the memory of the device and cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en
CVE ID: CVE-2017-15324 State: PUBLISHED Published: 2017-12-22T17:00:00Z Last Updated: 2024-09-16T22:20:26.332Z Vendors: Huawei Technologies Co., Ltd. Products: S12700, S1700, S2700, S5700, S6700, S7700, S9700 Problem Types: DoS Description: Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-e
s: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en
CVE ID: CVE-2017-15325 State: PUBLISHED Published: 2018-03-23T16:00:00Z Last Updated: 2024-09-17T04:14:18.256Z Vendors: Huawei Technologies Co., Ltd. Products: Prague Problem Types: integer overflow Description: The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to t
into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to the driver of the smart phone, causing arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180321-01-smartphone-en
CVE ID: CVE-2017-15326 State: PUBLISHED Published: 2018-03-23T16:00:00Z Last Updated: 2024-09-16T20:53:07.931Z Vendors: Huawei Technologies Co., Ltd. Products: DBS3900 TDD LTE Problem Types: weak encryption algorithm Description: DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated in the communication, an unauthenticated remote attacker can exploit this vulnerability to crack the encrypted data and cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.
data and cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en
CVE ID: CVE-2017-15327 State: PUBLISHED Published: 2018-04-11T17:00:00 Last Updated: 2024-08-05T19:50:16.457Z Vendors: Huawei Technologies Co., Ltd. Products: S12700, S7700, S9700 Problem Types: improper authorization Description: S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010
002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerability on Huawei switch products. The system incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by authenticated user. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180328-01-authentication-en
CVE ID: CVE-2017-15328 State: PUBLISHED Published: 2017-12-22T17:00:00 Last Updated: 2024-08-05T19:50:16.494Z Vendors: Huawei Technologies Co., Ltd. Products: HG8245H Problem Types: authentication bypass Description: Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect product. Due to improper verification of the privilege, successful exploitation may cause information leak. Additional Analyst Notes: - CVE Program Container: References: - http://support.huawei.com/carrier/docview%21docview?nid=DOC1000441394&path=PBI1-7275726/PBI1-7275742/PBI1-7912539/PBI1-22318696/PBI1-8952133/PBI1-8957546/PBI1-2