Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ccupation or information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-01-smartphone-en
CVE ID: CVE-2017-8154 State: PUBLISHED Published: 2018-04-11T17:00:00 Last Updated: 2024-08-05T16:27:22.436Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 8 Lite Problem Types: MITM Description: The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-0
st Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en
CVE ID: CVE-2017-8155 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:02:09.605Z Vendors: Huawei Technologies Co., Ltd. Products: B2338-168 Problem Types: no authentication Description: The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and execute them without authentication. Successful exploit could allow the attacker to take control over the outdoor unit. Additional Analyst Notes: - CVE Program Container: References: - http:
e attacker to take control over the outdoor unit. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en
CVE ID: CVE-2017-8156 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:17:41.313Z Vendors: Huawei Technologies Co., Ltd. Products: B2338-168 Problem Types: no authentication Description: The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow the attacker to take control over the outdoor unit. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-2017
yst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en
CVE ID: CVE-2017-8157 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:55:14.643Z Vendors: Huawei Technologies Co., Ltd. Products: OceanStor 5800 V3, OceanStor 6900 V3 Problem Types: information leakage Description: OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en
CVE ID: CVE-2017-8158 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T23:36:50.520Z Vendors: Huawei Technologies Co., Ltd. Products: FusionCompute Problem Types: improper authorization Description: FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. An authenticated attacker could create a large number of virtual machine (VM) processes to exhaust system resources. Successful exploit could make new VMs unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-do
- CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-dos-en
CVE ID: CVE-2017-8159 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:40:02.593Z Vendors: Huawei Technologies Co., Ltd. Products: Agassi-L09HN,Agassi-W09HN,Kobe-L09AHN,Kobe-W09CHN, Problem Types: Type Confusion Description: Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution. Additional Analyst Notes: - CVE Program
exploit could result in buffer overflow then may cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171018-02-smartphone-en
CVE ID: CVE-2017-8160 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:21:17.619Z Vendors: Huawei Technologies Co., Ltd. Products: Vicky-AL00A,Vicky-AL00C,Vicky-TL00A,Victoria-AL00A,Victoria-TL00A Problem Types: Use After Free Description: The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167,Earlier than Victoria-AL00AC00B172 versions,Victoria-TL00AC00B123,Victoria-TL00AC01B167 has a use after free (UAF) vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitr
malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-smartphone-en
CVE ID: CVE-2017-8161 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:58:52.601Z Vendors: Huawei Technologies Co., Ltd. Products: EVA-L09 Problem Types: FRP bypass Description: EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypa
can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en
CVE ID: CVE-2017-8162 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:41:24.286Z Vendors: Huawei Technologies Co., Ltd. Products: AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,NetEngine16EX,SMC2.0,SRG1300,SRG2300,SRG3300 Problem Types: DoS Description: AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software
,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V
oftware V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C0
h software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have a DoS vulnerability. Due to incorrect malformed message processing logic, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause stack overflow and make a service unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en
CVE ID: CVE-2017-8163 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:09:25.595Z Vendors: Huawei Technologies Co., Ltd. Products: AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,NetEngine16EX,SMC2.0,SRG1300,SRG2300,SRG3300 Problem Types: out-of-bounds read Description: AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S
20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11,
AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006
C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause out-of-bounds read and system crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en
CVE ID: CVE-2017-8164 State: PUBLISHED Published: 2018-03-05T19:00:00Z Last Updated: 2024-09-17T04:29:08.001Z Vendors: Huawei Technologies Co., Ltd. Products: EVA-AL10; EVA-CL00; EVA-DL00; EVA-L09; EVA-L19; EVA-L29; EVA-TL00; VIE-L09; VIE-L29 Problem Types: DoS Description: Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B
368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hua
Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-smartphone-en
CVE ID: CVE-2017-8165 State: PUBLISHED Published: 2018-03-05T19:00:00Z Last Updated: 2024-09-17T01:11:43.010Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: sensitive information leak Description: Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171117-01-smartphone-en
CVE ID: CVE-2017-8166 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:11:37.849Z Vendors: Huawei Technologies Co., Ltd. Products: Honor V9 Problem Types: App Lock Bypass Description: Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171019-01-smartphone-en
CVE ID: CVE-2017-8167 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:27:28.877Z Vendors: Huawei Technologies Co., Ltd. Products: USG9500 Problem Types: DoS Description: Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-firewall-en
CVE ID: CVE-2017-8168 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:25:15.106Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Information Leak Description: FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en
CVE ID: CVE-2017-8169 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:22:09.669Z Vendors: Huawei Technologies Co., Ltd. Products: VIE-L09 Problem Types: Buffer overflow Description: Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025
lyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-en
CVE ID: CVE-2017-8170 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:53:09.689Z Vendors: Huawei Technologies Co., Ltd. Products: VIE-L09 Problem Types: Buffer overflow Description: Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025
CVE ID: CVE-2017-8171 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:05:49.591Z Vendors: Huawei Technologies Co., Ltd. Products: Vicky-AL00A Problem Types: FRP Bypass Description: Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to bypass the Google account verification. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/sec
unction is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-frpbypass-en
CVE ID: CVE-2017-8172 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:07:30.207Z Vendors: Huawei Technologies Co., Ltd. Products: P10 Plus,P10 Problem Types: DoS Description: Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en
esults in smart phone restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en - http://www.securityfocus.com/bid/99370
CVE ID: CVE-2017-8173 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:24:14.588Z Vendors: Huawei Technologies Co., Ltd. Products: Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 Problem Types: FRP Bypass Description: Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earlier than Warsaw-AL00C00B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone
0B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by some secret code and can perform some operations to update the Google account. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170715-01-frpbypass-en
CVE ID: CVE-2017-8174 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:56:13.061Z Vendors: Huawei Technologies Co., Ltd. Products: Secospace USG6300,Secospace USG6600 Problem Types: Weak Algorithm Description: Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-e
s: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en
CVE ID: CVE-2017-8175 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T21:57:42.071Z Vendors: Huawei Technologies Co., Ltd. Products: Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 Problem Types: Insufficient Input Validation Description: The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot. Additional Analyst Notes: - CVE Program Contai
icious APP. The APP can modify specific parameter to cause system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en
CVE ID: CVE-2017-8176 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T16:27:22.851Z Vendors: Huawei Technologies Co., Ltd. Products: IPTV STB Problem Types: Authentication Bypass Description: Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free. Additional Analyst Notes: - CVE Program Container: References: - http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=P
References: - http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B - http://security.my/post/165370836947/cve-2017-8176
CVE ID: CVE-2017-8177 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:40:41.137Z Vendors: Huawei Technologies Co., Ltd. Products: HiWallet Problem Types: Lack of Signature Verification Description: Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-app-en