PT-2016-5775 · Huawei · Huawei Ar3200+1

Publicado 2016-04-06 · Atualizado 2016-05-18 · CVE-2016-3950

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei AR3200 routers with software before V200R006C10SPC300

Description The issue is related to an input validation vulnerability that allows remote authenticated users to cause a denial of service, resulting in the device restarting. This can be achieved by sending crafted or malformed packets to the device. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Huawei AR3200 routers with software before V200R006C10SPC300, update the software to V200R006C10SPC300 or later to resolve the issue. As a temporary workaround, consider restricting access to the device and implementing additional security measures to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-3950

Produtos afetados

Huawei Ar3200

Huawei Vrp

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-3950 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160406-01-ar-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3950 · Nota de Segurança