Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
BID:64634
Info
Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 64634 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 28 2013 12:00AM |
| Updated: | Dec 28 2013 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Huawei CE6800 V100R001C00SPC200 Huawei CE5800 V100R001C00SPC200 Huawei CE12800 V100R001C01SPC100 Huawei CE12800 V100R001C00SPC200 |
| Not Vulnerable: |
Huawei CE6800 V100R002C00SPC200 Huawei CE6800 V100R001SPH001 Huawei CE5800 V100R002C00SPC200 Huawei CE5800 V100R001SPH001 Huawei CE12800 V100R002C00SPC200 Huawei CE12800 V100R001SPH001 |
Discussion
Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
Huawei CloudEngine series switches are prone to multiple security-bypass vulnerabilities.
An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions.
Huawei CloudEngine series switches are prone to multiple security-bypass vulnerabilities.
An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions.
Exploit / POC
Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
An attacker can exploit these issues through a browser.
An attacker can exploit these issues through a browser.
Solution / Fix
Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Huawei CloudEngine Series Switches Multiple Security Bypass Vulnerabilities
References:
References:
- CloudEngine Series Data Center Switches Homepage (Huawei Technologies)
- Security Advisory-A Vulnerability on the HWTACACS Authorization Module of the Cl (Huawei Technologies)