Latest huawei fusioncompute Vulnerabilities

● CVE-2021-37102
There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special...
Huawei FusionCompute=6.0.0
Huawei FusionCompute=6.3.0
Huawei FusionCompute=6.3.1
Huawei FusionCompute=6.5.0
Huawei FusionCompute=6.5.1
Huawei FusionCompute=8.0.0
● CVE-2021-37036
There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific information in the log file, the attacker can ob...
Huawei Ecns280 Td Firmware=v100r005c00
Huawei Ecns280 Td Firmware=v100r005c10
Huawei Ecns280 Td
Huawei FusionCompute=6.5.1
● CVE-2021-37105
There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access p...
Huawei FusionCompute=6.5.0
Huawei FusionCompute=6.5.1
Huawei FusionCompute=8.0.0
● CVE-2021-37106
Huawei FusionCompute=6.3.0
Huawei FusionCompute=6.3.1
Huawei FusionCompute=6.5.0
Huawei FusionCompute=8.0.0
● CVE-2021-22358
There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the devic...
Huawei FusionCompute=8.0.0
● CVE-2020-9114
FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with common privilege may access some specific ...
Huawei FusionCompute=6.3.0
Huawei FusionCompute=6.3.1
Huawei FusionCompute=6.5.0
Huawei FusionCompute=6.5.1
Huawei FusionCompute=8.0.0
● CVE-2020-9116
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient ve...
Huawei FusionCompute=6.5.1
Huawei FusionCompute=8.0.0
● CVE-2020-9128
FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerability to cause information leak.
Huawei FusionCompute=8.0.0
● CVE-2020-9246
FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and information protection. Attackers with low privilege can get some extra information. This ...
Huawei FusionCompute=8.0.0
● CVE-2020-9233
FusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit the vulnerability to delete some files and cause some services abnormal.
Huawei FusionCompute=8.0.0
● CVE-2020-9242
FusionCompute 8.0.0 have a command injection vulnerability. The software does not sufficiently validate certain parameters post from user, successful exploit could allow an authenticated attacker to l...
Huawei FusionCompute=8.0.0
● CVE-2020-9229
FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploit this vulnerability to obtain certain information.
Huawei FusionCompute=8.0.0
● CVE-2020-9228
Huawei FusionCompute=8.0.0
● CVE-2020-9078
FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause th...
Huawei FusionCompute=8.0.0
● CVE-2020-9248
Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerabili...
Huawei FusionCompute=8.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203