deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9691
Published: 2017-04-02
Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow users who log in to the products to view the sessions IDs of all online users on the Online Users page of the web UI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/hw-408100; http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE: CVE-2014-9692
Published: 2017-04-02
Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to figure out the RMCP+ session IDs of users and access the system with forged identities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/hw-408100; http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE: CVE-2014-9693
Published: 2017-04-02
Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to execute arbitrary code or restart the system via crafted DNS packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-19
References: http://www.huawei.com/en/psirt/security-advisories/hw-408100; http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE: CVE-2014-9694
Published: 2017-04-02
Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions have a CSRF vulnerability. The products do not use the Token mechanism for web access control. When users log in to the Huawei servers and access websites containing the malicious CSRF script, the CSRF script is executed, which may cause configuration tampering and system restart.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.huawei.com/en/psirt/security-advisories/hw-408100; http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE: CVE-2014-9695
Published: 2017-04-02
Description: The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/hw-408118; http://www.huawei.com/en/psirt/security-advisories/hw-408118
CVE: CVE-2014-9696
Published: 2017-04-02
Description: The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/hw-408117; http://www.huawei.com/en/psirt/security-advisories/hw-408117
CVE: CVE-2015-2246
Published: 2017-04-02
Description: The MeWidget module on Huawei P7 smartphones with software P7-L10 V100R001C00B136 and earlier versions could lead to the disclosure of contact information.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/hw-414289; http://www.huawei.com/en/psirt/security-advisories/hw-414289
CVE: CVE-2015-7844
Published: 2017-04-02
Description: Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/hw-453537; http://www.huawei.com/en/psirt/security-advisories/hw-453537
CVE: CVE-2015-7847
Published: 2017-04-02
Description: Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious packet to the Common Gateway Interface (CGI) of a target device and make it fail while setting the port attribute, which causes a DoS attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/hw-450877; http://www.huawei.com/en/psirt/security-advisories/hw-450877
CVE: CVE-2015-8670
Published: 2017-04-02
Description: Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/hw-464247; http://www.huawei.com/en/psirt/security-advisories/hw-464247
CVE: CVE-2015-8671
Published: 2017-04-02
Description: Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/hw-464243; http://www.huawei.com/en/psirt/security-advisories/hw-464243
CVE: CVE-2016-2404
Published: 2017-04-02
Description: Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160217-01-switch-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160217-01-switch-en
CVE: CVE-2016-6177
Published: 2017-04-02
Description: The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System (NFS) packets, causing an anomaly in specific disk arrays.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-02-oceanstor-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-02-oceanstor-en
CVE: CVE-2016-8271
Published: 2017-04-02
Description: Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-espace-en; http://www.securityfocus.com/bid/98096; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-espace-en
CVE: CVE-2016-8272
Published: 2017-04-02
Description: Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en
CVE: CVE-2016-8273
Published: 2017-04-02
Description: Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en
CVE: CVE-2016-8274
Published: 2017-04-02
Description: Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en
CVE: CVE-2016-8275
Published: 2017-04-02
Description: Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-anyoffice-en; http://www.securityfocus.com/bid/93010; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-anyoffice-en
CVE: CVE-2016-8754
Published: 2017-04-02
Description: Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161017-01-storage-en; http://www.securityfocus.com/bid/93607; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161017-01-storage-en
CVE: CVE-2016-8756
Published: 2017-04-02
Description: ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-smartphone-en; http://www.securityfocus.com/bid/93935; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-smartphone-en
CVE: CVE-2016-8757
Published: 2017-04-02
Description: ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-02-smartphone-en; http://www.securityfocus.com/bid/93932; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-02-smartphone-en
CVE: CVE-2016-8758
Published: 2017-04-02
Description: ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-smartphone-en; http://www.securityfocus.com/bid/95384; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-smartphone-en
CVE: CVE-2016-8759
Published: 2017-04-02
Description: Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en; http://www.securityfocus.com/bid/93530; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en
CVE: CVE-2016-8760
Published: 2017-04-02
Description: Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en; http://www.securityfocus.com/bid/93530; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en
CVE: CVE-2016-8761
Published: 2017-04-02
Description: Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en; http://www.securityfocus.com/bid/93530; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en
CVE: CVE-2016-8762
Published: 2017-04-02
Description: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en; http://www.securityfocus.com/bid/94509; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en
CVE: CVE-2016-8763
Published: 2017-04-02
Description: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-664
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en; http://www.securityfocus.com/bid/94509; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en
CVE: CVE-2016-8764
Published: 2017-04-02
Description: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en; http://www.securityfocus.com/bid/94509; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en
CVE: CVE-2016-8768
Published: 2017-04-02
Description: Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-pxn-en; http://www.securityfocus.com/bid/93885; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-pxn-en
CVE: CVE-2016-8769
Published: 2017-04-02
Description: Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file in the search path of the affected service and obtain elevated privileges after the executable file is executed.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-utps-en; http://www.security-geek.in/2017/02/07/0day-discovery-system-level-access-by-privilege-escalation-of-huawei-manufactured-airtel-photon-dongles/; http://www.securityfocus.com/bid/94403
CVE: CVE-2016-8773
Published: 2017-04-02
Description: Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with software V200R003C00, V200R005C00, V200R008C00, V200R009C00; S6700 with software V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R008C00, V200R009C00; S7700 with software V200R007C00, V200R008C00, V200R009C00; S9300 with software V200R007C00, V200R008C00, V200R009C00; S9700 with software V200R007C00, V200R008C00, V200R009C00; and S12700 with software V200R007C00, V200R007C01, V200R008C00, V200R009C00 allow the attacker to cause a denial of service condition by sending malformed MPLS packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161111-01-mpls-en; http://www.securityfocus.com/bid/94285; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161111-01-mpls-en