Vulnerabilities for Fusionaccess (...) - CXSECURITY.COM

Vulnerabilities for 'Fusionaccess'

2020-10-12

CVE-2020-9090

CWE-863

FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product.

2020-06-15

CVE-2020-1825

CWE-20

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.

2017-04-02

CVE-2016-8779

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol (LDAP) operation command into a specific input variable to obtain sensitive information from the database.

CVE-2015-7844

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable.

2016-09-07

CVE-2016-6839

CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

>>> Vendor: Huawei 665 Products

Versatile routing platform

Mt882 v100t002b020 arg-t

Mt882 modem firmware

Eudemon usg5300

Eudemon usg5500

Eudemon usg9300

Eudemon usg9500

Quidway service process unit board s7700

Quidway service process unit board s9300

Quidway service process unit board s9700

Seco versatile security manager

See all Products for Vendor Huawei

Copyright 2024, cxsecurity.com