![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.107827 |
Categoría: | Huawei |
Título: | Huawei Data Communication: Improper Resource Management Vulnerability in Some Huawei Products (huawei-sa-20180418-01-ar) |
Resumen: | There is an improper resource management vulnerability in some AR series products. |
Descripción: | Summary: There is an improper resource management vulnerability in some AR series products. Vulnerability Insight: There is an improper resource management vulnerability in some AR series products. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition. (Vulnerability ID: HWPSIRT-2018-03021)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2018-7920.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition. Affected Software/OS: AR1200 versions V200R006C10SPC300 AR160 versions V200R006C10SPC300 AR200 versions V200R006C10SPC300 AR2200 versions V200R006C10SPC300 AR3200 versions V200R006C10SPC300 Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2018-7920 |
Copyright | Copyright (C) 2020 Greenbone Networks GmbH |
Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |