Description (CNA)
There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei / CloudEngine 12800 | affected V200R019C00SPC800 |
| Huawei / CloudEngine 5800 | affected V200R019C00SPC800 |
| Huawei / CloudEngine 6800 | affected V200R005C20SPC800; affected V200R019C00SPC800 |
| Huawei / CloudEngine 7800 | affected V200R019C00SPC800 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.