CVE-2016-6901 — MEDIUM (6.5)

Vulnerability Description

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Ar Firmware	v200r005
Huawei	Ar100	-
Huawei	Ar120	-
Huawei	Ar1200	-
Huawei	Ar150	-
Huawei	Ar200	-
Huawei	Ar2200	-
Huawei	Ar2500	-
Huawei	Ar3200	-
Huawei	Ar3600	-
Huawei	Ar500	-
Huawei	Ar550	-
Huawei	Netengine 16Ex Firmware	v200r005
Huawei	Netengine 16Ex	-

Related Weaknesses (CWE)

CWE-20

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-enVendor Advisory
http://www.securityfocus.com/bid/92618Third Party AdvisoryVDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-enVendor Advisory
http://www.securityfocus.com/bid/92618Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-6901?

CVE-2016-6901 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers wit...

How severe is CVE-2016-6901?

CVE-2016-6901 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-6901?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ar Firmware, Huawei Ar100, Huawei Ar120, Huawei Ar1200, Huawei Ar150.