PT-2016-6319 · Huawei · Huawei Vp9630+3

Publicado 2016-06-13 · Atualizado 2016-11-28 · CVE-2016-5234

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei VP9660 versions prior to V500R002C00SPC200 Huawei VP9650 versions prior to V500R002C00SPC200 Huawei VP9630 versions prior to V500R002C00SPC200 Huawei RSE6500 versions prior to V500R002C00SPC100

Description The issue is related to a buffer overflow that can be triggered when an unspecified service is enabled. This allows remote attackers to execute arbitrary code via a crafted packet.

Recommendations For Huawei VP9660 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei VP9650 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei VP9630 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei RSE6500 versions prior to V500R002C00SPC100, update to V500R002C00SPC100 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-5234

Produtos afetados

Huawei Rse6500

Huawei Vp9630

Huawei Vp9650

Huawei Vp9660

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-5234 · Aviso do Fabricante
• http://securityfocus.com/bid/90978 · Nota
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5234 · Nota de Segurança