1. Home
  2. CVE Database
  3. CVE-2016-2404
HIGH · 7.5

CVE-2016-2404

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; A...

Vulnerability Description

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiS5700 Firmwarev200r001c00spc300
HuaweiS5700-
HuaweiS6700 Firmwarev200r001c00spc300
HuaweiS6700-
HuaweiS7700 Firmwarev200r001c00spc300
HuaweiS7700-
HuaweiS9700 Firmwarev200r001c00spc300
HuaweiS9700-
HuaweiS12700 Firmwarev200r005c00spc500
HuaweiS12700-
HuaweiAcu2 Firmwarev200r005c00spc500
HuaweiAcu2-

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2016-2404?

CVE-2016-2404 is a vulnerability with a CVSS score of 7.5 (HIGH). Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; A...

How severe is CVE-2016-2404?

CVE-2016-2404 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-2404?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei S5700 Firmware, Huawei S5700, Huawei S6700 Firmware, Huawei S6700, Huawei S7700 Firmware.