PT-2017-7461 · Huawei · Huawei Logcenter

Publicado 2017-04-02 · Atualizado 2017-04-05 · CVE-2015-8670

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Huawei LogCenter version V100R001C10

Description The issue allows an authenticated attacker to add abnormal device information to the log collection module, resulting in a denial of service.

Recommendations For Huawei LogCenter version V100R001C10, consider restricting access to the log collection module to prevent abnormal device information from being added until a fix is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-8670

Produtos afetados

Huawei Logcenter

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8670 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/hw-464247 · Aviso do Fabricante