Description
There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Huawei | CloudEngine 12800 | V200R019C00SPC800 | — |
| Huawei | CloudEngine 5800 | V200R019C00SPC800 | — |
| Huawei | CloudEngine 6800 | V200R005C20SPC800, V200R019C00SPC800 | — |
| Huawei | CloudEngine 7800 | V200R019C00SPC800 | — |