Search Results | AttackerKB

22 Total Results

Displaying 1-10 of 22

Attacker Value

Unknown

CVE-2019-19415

Disclosure Date: July 08, 2020 (last updated February 21, 2025)

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Attacker Value

Unknown

CVE-2019-19416

Disclosure Date: July 08, 2020 (last updated February 21, 2025)

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2019-19417

Disclosure Date: July 08, 2020 (last updated February 21, 2025)

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2020-1841

Disclosure Date: February 17, 2020 (last updated November 27, 2024)

Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2017-17174

Disclosure Date: July 31, 2018 (last updated November 27, 2024)

Some Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R003C20; V200R003C30; V200R003C50 have a weak algorithm vulnerability. To exploit the vulnerability, a remote, unauthenticated attacker has to capture TLS traffic between clients and the affected products. The attacker may launch the Bleichenbacher attack on RSA key exchange to decrypt the session key and the previously captured sessions by some cryptanalytic operations. Successful exploit may cause information leak.

Attacker Value