TE30

TE50 V500R002C00

OTHER 16 CVEs

Secospace USG6300 V500R001C00

OTHER 4 CVEs

USG6300 V100R001C10

OTHER 1 CVE

TE60 V100R001C01SPC100

OTHER 3 CVEs

V500R002C00

OTHER 24 CVEs

V100R011C03SPC200

OTHER 3 CVEs

TE50 V600R006C00

OTHER 1 CVE

Secospace USG6500 V500R001C00

OTHER 4 CVEs

V500R002C00B012

OTHER 1 CVE

TE30 V100R001C10SPC300

OTHER 1 CVE

V100R001C10B019

OTHER 1 CVE

NIP6600 V500R001C00

OTHER 4 CVEs

V500R002C00SPC100

OTHER 4 CVEs

V100R002C00SPC800

OTHER 3 CVEs

USG9500 V500R001C00

OTHER 4 CVEs

V100R001C10B001

OTHER 1 CVE

V100R001C10SPC700

OTHER 4 CVEs

V500R002C00B011

OTHER 1 CVE

V100R001C10B012

OTHER 1 CVE

IPS Module V500R001C00

OTHER 4 CVEs

V100R001C10SPC900

OTHER 4 CVEs

V100R001C10SPC500

OTHER 4 CVEs

V500R002C00B013

OTHER 1 CVE

TE50 V500R002C00SPC600

OTHER 4 CVEs

V100R001C10SPC300

OTHER 3 CVEs

V100R001C10B016

OTHER 1 CVE

V500R002C00SPC300

OTHER 4 CVEs

V500R002C00SPC900

OTHER 4 CVEs

V100R011C03

OTHER 4 CVEs

eSpace U1960 V200R003C30SPC200

OTHER 3 CVEs

V100R001C10SPC200B010

OTHER 3 CVEs

S1700 V200R006C10

OTHER 4 CVEs

TE30 V100R001C10

OTHER 15 CVEs

V100R001C10B013

OTHER 1 CVE

V200R003C20SPCa00

OTHER 3 CVEs

V100R011C03LGWL01SPC100

OTHER 3 CVEs

TE40 V500R002C00

OTHER 16 CVEs

V500R002C00SPC400

OTHER 4 CVEs

S2700 V200R006C10

OTHER 4 CVEs

V100R002C10

OTHER 7 CVEs

V500R001C00

OTHER 1 CVE

V100R001C10B002

OTHER 1 CVE

V600R006C00SPC200

OTHER 4 CVEs

V100R011C03B012SP16

OTHER 3 CVEs

V500R001C30

OTHER 5 CVEs

V100R001C10B018

OTHER 1 CVE

V100R002C00SPC400

OTHER 3 CVEs

S5700 V200R006C00

OTHER 4 CVEs

V500R002C00SPC700

OTHER 4 CVEs

V100R001C10B014

OTHER 1 CVE

DP300 V500R002C00

OTHER 20 CVEs

V500R002C00SPC300T

OTHER 3 CVEs

V100R001C01SPC107TB010

OTHER 3 CVEs

V500R002C00SPCa00

OTHER 4 CVEs

ViewPoint 9030 V100R011C02SPC100

OTHER 3 CVEs

V500R002C00B010

OTHER 1 CVE

RSE6500 V500R002C00SPC100

OTHER 3 CVEs

S7700 V200R007C00

OTHER 4 CVEs

V100R001C10B011

OTHER 1 CVE

V100R001C30

OTHER 1 CVE

V100R011C03SPC300

OTHER 3 CVEs

V200R007C00

OTHER 4 CVEs

V500R002C00T

OTHER 3 CVEs

V600R006C00

OTHER 24 CVEs

RP200 V500R002C00

OTHER 11 CVEs

V100R002C00SPC700

OTHER 3 CVEs

TP3106 V100R002C00

OTHER 7 CVEs

V100R011C03SPC400

OTHER 3 CVEs

V500R002C00B017

OTHER 1 CVE

V200R010C00

OTHER 4 CVEs

TE60 V100R001C10

OTHER 13 CVEs

Secospace USG6500 V100R001C10

OTHER 1 CVE

V100R011C03B012SP15

OTHER 3 CVEs

S9700 V200R007C00

OTHER 4 CVEs

V200R007C01

OTHER 4 CVEs

V600R006C00SPC100

OTHER 4 CVEs

TP3206 V100R002C00

OTHER 7 CVEs

V500R001C20

OTHER 1 CVE

V100R001C10B017

OTHER 1 CVE

eSpace U1981 V100R001C20SPC700

OTHER 3 CVEs

V100R011C03SPC100

OTHER 3 CVEs

TE60 V100R001C01

OTHER 5 CVEs

V100R001C10SPC600

OTHER 4 CVEs

Secospace USG6600 V500R001C00

OTHER 4 CVEs

VP9660 V500R002C10

OTHER 1 CVE

V100R001C10B010

OTHER 1 CVE

ViewPoint 9030 V100R011C02

OTHER 4 CVEs

V200R009C00

OTHER 4 CVEs

V200R008C00

OTHER 4 CVEs

V500R002C00SPC800

OTHER 4 CVEs

TE40 V500R002C00SPC600

OTHER 4 CVEs

V500R002C00SPCe00

OTHER 1 CVE

V100R001C10SPC800

OTHER 3 CVEs

TE30 V100R001C02

OTHER 5 CVEs

V100R001C10SPC800B011

OTHER 1 CVE

V500R001C50

OTHER 1 CVE

Secospace USG6600 V100R001C00

OTHER 1 CVE

V100R011C03B015SP03

OTHER 3 CVEs

V100R001C10SPC400

OTHER 4 CVEs

S12700 V200R007C00

OTHER 4 CVEs

V500R001C30S

OTHER 4 CVEs

V500R002C00SPC200

OTHER 4 CVEs

V500R002C00B018

OTHER 1 CVE

V100R001C20

OTHER 1 CVE

V100R001C10SPC700B010

OTHER 4 CVEs

V500R002C00SPCd00

OTHER 4 CVEs

V100R002C00SPC600

OTHER 3 CVEs

V500R002C00B014

OTHER 1 CVE

RP200 V600R006C00

OTHER 2 CVEs

V100R001C10

OTHER 11 CVEs

V500R002C00SPC600

OTHER 4 CVEs

V500R002C00SPC500

OTHER 4 CVEs

NIP6300 V500R001C00

OTHER 4 CVEs

RP200 V500R002C00SPC200

OTHER 7 CVEs

S6700 V200R008C00

OTHER 4 CVEs

V100R001C10SPC100

OTHER 3 CVEs

NGFW Module V500R001C00

OTHER 4 CVEs

V100R002C00SPC200

OTHER 3 CVEs

V100R011C03SPC500

OTHER 3 CVEs

V600R006C00SPC300

OTHER 4 CVEs

V500R002C00SPCb00

OTHER 4 CVEs

CVE-2017-17317

Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted message to the affected products. Due to insufficient input validation, successful exploit may cause some services abnormal.

UNKNOWN Jul 02, 2018

CVE-2017-17219

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service.

UNKNOWN Mar 09, 2018

CVE-2017-17200

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.

UNKNOWN Mar 09, 2018

CVE-2017-17199

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.

UNKNOWN Mar 09, 2018

CVE-2017-17220

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service.

UNKNOWN Mar 09, 2018

CVE-2017-17134

XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has a DoS vulnerability. Due to not check the specially XML file enough an authenticated local attacker may craft specific XML files to the affected products and parse this file which cause to null pointer accessing and result in DoS attacks.

UNKNOWN Mar 05, 2018

CVE-2017-17136

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a heap overflow vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.

UNKNOWN Mar 05, 2018

CVE-2017-17144

Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability when the module process a specific amount of state. The module cannot handle it causing SIP module DoS.

UNKNOWN Mar 05, 2018

CVE-2017-17143

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability that the module cannot parse a malformed SIP message when validating variables. Attacker can exploit it to make one process reboot at random.

UNKNOWN Mar 05, 2018

CVE-2017-17137

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.

UNKNOWN Mar 05, 2018