PT-2017-7461 · Huawei · Huawei Logcenter

Published 2017-04-02 · Updated 2017-04-05 · CVE-2015-8670

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Huawei LogCenter version V100R001C10

Description The issue allows an authenticated attacker to add abnormal device information to the log collection module, resulting in a denial of service.

Recommendations For Huawei LogCenter version V100R001C10, consider restricting access to the log collection module to prevent abnormal device information from being added until a fix is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-8670

Affected Products

Huawei Logcenter

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8670 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-464247 · Vendor Advisory