description: Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.
problem types: Insufficient Verification
affected:
{
product: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;CloudEngine 12800;NetEngine16EX;S6700;SRG1300;SRG2300;SRG3300
vendor: n/a
versions:
status: affected, version: V200R005C20
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C50
status: affected, version: V200R005C00
status: affected, version: V200R002C10
status: affected, version: V200R002C20
status: affected, version: V200R008C00
status: affected, version: V200R010C00SPC300
status: affected, version: V200R010C00SPC600
status: affected, version: V200R011C00SPC200
}