Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 5800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 6800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200
10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, TE30 V100R001C10, TE60 V100R003C00, V500R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, ViewPoint 8660 V100R008C02, V100R008C03, eSpace IAD V300R002C01, eSpace U1981 V200R003C20, V200R003C30, eSpace USM V100R001C01, V300R001C00 have a weak cryptography vulnerability. Due to not properly some values in the certificates, an unauthenticated remote attacker could forges a specific RSA certific
to not properly some values in the certificates, an unauthenticated remote attacker could forges a specific RSA certificate and exploits the vulnerability to pass identity authentication and logs into the target device to obtain permissions configured for the specific user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171222-01-cryptography-en
CVE ID: CVE-2017-17302 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:51:30.490Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: memory leak Description: Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load some specific Certificate Revocation List(CRL) configuration files to the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and
the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-memory-en
CVE ID: CVE-2017-17303 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.515Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: information disclosure Description: Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600;
SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C
C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message wh
100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en
CVE ID: CVE-2017-17304 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.518Z Vendors: n/a Products: DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981 Problem Types: Input Validation Description: The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R
CVE ID: CVE-2017-17305 State: PUBLISHED Published: 2018-08-21T13:00:00 Last Updated: 2024-08-05T20:51:30.548Z Vendors: Huawei Technologies Co., Ltd. Products: USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR Problem Types: Bleichenbacher Oracle Description: Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security. Additional Anal
a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en
CVE ID: CVE-2017-17306 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T20:51:30.727Z Vendors: Huawei Technologies Co., Ltd. Products: VNS-L21 Problem Types: array out-of-bounds read Description: Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.hu
y and possibly cause the device abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en
CVE ID: CVE-2017-17307 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T20:51:30.591Z Vendors: Huawei Technologies Co., Ltd. Products: VNS-L21 Problem Types: out-of-bounds read Description: Some Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read vulnerability. Due to the lack string terminator of string, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds and possibly cause the device abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read
es: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read-en
CVE ID: CVE-2017-17308 State: PUBLISHED Published: 2018-04-11T17:00:00 Last Updated: 2024-08-05T20:51:30.591Z Vendors: Huawei Technologies Co., Ltd. Products: DP300, RP200, TE30, TE40, TE50, TE60 Problem Types: invalid memory access Description: SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote attacker may send specially crafted packets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abno
ets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en
CVE ID: CVE-2017-17309 State: PUBLISHED Published: 2018-06-14T14:00:00 Last Updated: 2024-08-05T20:51:30.488Z Vendors: Huawei Technologies Co., Ltd. Products: HG255s-10 Problem Types: path traversal Description: Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en - http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
CVE ID: CVE-2017-17310 State: PUBLISHED Published: 2018-04-19T14:00:00Z Last Updated: 2024-09-16T23:41:48.428Z Vendors: Huawei Technologies Co., Ltd. Products: DP300, RP200, TE30, TE40, TE50, TE60 Problem Types: buffer error Description: Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a buffer error vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted ENUM packets to the affected products. Due to insufficient verification of
ol the peer device and send specially crafted ENUM packets to the affected products. Due to insufficient verification of some values in the packets, successful exploit may cause buffer error and some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-enum-en
CVE ID: CVE-2017-17311 State: PUBLISHED Published: 2018-08-21T13:00:00 Last Updated: 2024-08-05T20:51:30.633Z Vendors: Huawei Technologies Co., Ltd. Products: USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR Problem Types: DoS Description: Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service. Additional Analyst No
these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en
CVE ID: CVE-2017-17312 State: PUBLISHED Published: 2018-08-21T13:00:00 Last Updated: 2024-08-05T20:51:30.524Z Vendors: Huawei Technologies Co., Ltd. Products: USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR Problem Types: DoS Description: Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service. Additional Analyst No
CVE ID: CVE-2017-17313 State: PUBLISHED Published: 2018-04-19T14:00:00Z Last Updated: 2024-09-16T16:23:50.913Z Vendors: Huawei Technologies Co., Ltd. Products: HUAWEI P9 Lite Problem Types: buffer overflow Description: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successf
lling a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en
CVE ID: CVE-2017-17314 State: PUBLISHED Published: 2018-04-30T14:00:00 Last Updated: 2024-08-05T20:51:30.553Z Vendors: Huawei Technologies Co., Ltd. Products: DP300, RP200, TE30, TE40, TE50, TE60 Problem Types: invalid memory access Description: Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an invalid memory access vulnerability. An unauthenticated attacker has to find a way to send malformed SCCP messages to the affected products. Due to insufficient input validation of some values in the messages, successful exploit may cause buffer error
roducts. Due to insufficient input validation of some values in the messages, successful exploit may cause buffer error and some service abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180425-02-buffer-en
CVE ID: CVE-2017-17315 State: PUBLISHED Published: 2018-05-24T14:00:00 Last Updated: 2024-08-05T20:51:30.557Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: numeric errors Description: Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specially crafted SCCP messages to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit wil
the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-sccp-en
CVE ID: CVE-2017-17316 State: PUBLISHED Published: 2018-07-02T13:00:00 Last Updated: 2024-08-05T20:51:31.142Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: out-of-bounds read Description: Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker has to control the peer device and craft the Signalling Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values i
ing Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values in the messages, successful exploit will cause out-of-bounds read and some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-sccp-en
CVE ID: CVE-2017-17317 State: PUBLISHED Published: 2018-07-02T13:00:00 Last Updated: 2024-08-05T20:51:30.748Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; IPS Module; NGFW Module; RP200; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60 Problem Types: buffer overflow Description: Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; T
0R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted message to the affected products. Due to insufficient input validation, successful exploit may cause some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-cops-en
CVE ID: CVE-2017-17318 State: PUBLISHED Published: 2018-04-30T14:00:00 Last Updated: 2024-08-05T20:51:30.727Z Vendors: Huawei Technologies Co., Ltd. Products: E5771h-937 Problem Types: DoS Description: Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability. Additional Analyst
e to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en
CVE ID: CVE-2017-17319 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T20:51:30.744Z Vendors: Huawei Technologies Co., Ltd. Products: P9 Problem Types: information disclosure Description: Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by multithreading. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in kernel information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-
onal Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-smartphone-en
CVE ID: CVE-2017-17320 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T20:51:30.549Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Pro Problem Types: memory double free Description: Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/securi
s code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en
CVE ID: CVE-2017-17321 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.745Z Vendors: Huawei Technologies Co., Ltd. Products: eNSP Problem Types: buffer overflow Description: Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability. Due to the improper validation of specific command line parameter, a local attacker could exploit this vulnerability to cause the software process abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ensp-en - http://www.securityfocus.com/bid/103425
CVE ID: CVE-2017-17322 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.798Z Vendors: Huawei Technologies Co., Ltd. Products: Honor Smart Scale Application Problem Types: information disclosure Description: Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103442 - http://www.huawei.com/en/psirt
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103442 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en
CVE ID: CVE-2017-17323 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.667Z Vendors: Huawei Technologies Co., Ltd. Products: iBMC Problem Types: improper authorization Description: Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en
CVE ID: CVE-2017-17324 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.718Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Pro Problem Types: integer overflow Description: Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/e
cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en