PT-2016-7122 · Huawei · Huawei Ac6605+4

Publicado 2016-08-17 · Atualizado 2016-09-22 · CVE-2016-6824

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200

Description The issue is related to an input validation problem in Huawei access controllers, allowing remote authenticated users to cause a denial of service by sending crafted CAPWAP packets, which can lead to a device restart. This is due to the lack of proper input validation, enabling an attacker to craft malformed CAPWAP protocol packets.

Recommendations For Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200, update the software to V200R006C10SPC200 or later to resolve the issue. As a temporary workaround, consider restricting access to the CAPWAP protocol to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-6824

Produtos afetados

Huawei Ac6003

Huawei Ac6005

Huawei Ac6605

Huawei Acu2

Huawei Vrp

Referências · 4

• http://securityfocus.com/bid/92506 · Nota
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en · Nota
• https://osv.dev/vulnerability/CVE-2016-6824 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6824 · Nota de Segurança