Vulnerabilities for Pcmanager (...) - CXSECURITY.COM

Vulnerabilities for 'Pcmanager'

2021-10-27

CVE-2021-37124

CWE-22

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.

2020-04-30

CVE-2020-1817

CWE-269

Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation.

2020-04-27

CVE-2020-1845

CWE-269

Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

2020-02-28

CVE-2020-1844

CWE-269

PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

2019-08-13

CVE-2019-5223

CWE-287

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution.

2019-06-06

CVE-2019-5242

CWE-20

There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write memory.

CVE-2019-5241

CWE-264

There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

>>> Vendor: Huawei 665 Products

Versatile routing platform

Mt882 v100t002b020 arg-t

Mt882 modem firmware

Eudemon usg5300

Eudemon usg5500

Eudemon usg9300

Eudemon usg9500

Quidway service process unit board s7700

Quidway service process unit board s9300

Quidway service process unit board s9700

Seco versatile security manager

See all Products for Vendor Huawei

Copyright 2024, cxsecurity.com