1. Home
  2. CVE Database
  3. CVE-2012-6570
HIGH · 10.0

CVE-2012-6570

The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches do...

Vulnerability Description

The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
HuaweiAr 18-1X<= r0130
HuaweiAr 18-2X<= r1712
HuaweiAr 18-3X<= r0118
HuaweiAr 19\/29\/49<= r2207
HuaweiAr 28\/46<= r0311
HuaweiS2000r6305
HuaweiS2300r6305
HuaweiS2700r6305
HuaweiS3000r6305
HuaweiS3300r6305
HuaweiS3300Hir6305
HuaweiS3500r6305
HuaweiS3700r6305
HuaweiS3900r6305
HuaweiS5100r6305
HuaweiS5600r6305
HuaweiS7800r6305
HuaweiS8500r1631

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2012-6570?

CVE-2012-6570 is a vulnerability with a CVSS score of 10.0 (HIGH). The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches do...

How severe is CVE-2012-6570?

CVE-2012-6570 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-6570?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ar 18-1X, Huawei Ar 18-2X, Huawei Ar 18-3X, Huawei Ar 19\/29\/49, Huawei Ar 28\/46.