CH121 v5 vulnerabilities

Huawei Enterprise Support Community

Community Forums Servers

Created: Feb 1, 2022 17:23:06Latest reply: Feb 2, 2022 19:51:27 219 2 1 0 0

HiCoins as reward： 0 (problem unresolved)

Hi all. I would like to request your wisdom to solve 3 vulnerabilities in CH121 v5 servers since a security analysis was run on 16 blades installed in E9000 chassis and the following 3 vulnerabilities were detected

Fix DOM-based Cross Site Scripting Vulnerability DOM-based Cross Site Scripting Vulnerability (http-client-side-xss).
Disable weak Key Exchange Algorithm SSH Server Supports Weak Key Exchange Algorithms (ssh-weak-kex-algorithms).
Restrict access to UPnP UPnP SSDP Traffic Amplification (upnp-ssdp-amplification)

I would like to know how to solve them.

CH121 V5 ssh server

x
convention：
Emotion(0)

Like (1) Dislike (0) Favorite(0) Report

 Previous: What is the default user name and password of the MM910

Next: Question about HUAWEI users



Featured Answers

Recommended answer

(0) (0)

from 2#

olive.zhao Admin Created Feb 2, 2022 02:01:01

Hello, friend!

If you want to know more detail information, you are advised to contact the local TAC.
Thanks!

x
convention：

All Answers

(0) (0)

^2#

olive.zhao Admin Created Feb 2, 2022 02:01:01

Hello, friend!

If you want to know more detail information, you are advised to contact the local TAC.
Thanks!

x
convention：

(1) (0)

^3#

Saqibaz

Created Feb 2, 2022 19:51:27

Thanks for sharing

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

Recommended answer

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

CH121 v5 vulnerabilities

Recommended answer

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

My Followers