PT-2016-7157 · Huawei · Huawei Ibmc

Publicado 2016-09-07 · Atualizado 2016-09-08 · CVE-2016-6899

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei iBMC versions prior to V100R003C00SPC613 Huawei iBMC versions prior to V100R003C00SPC617 Huawei iBMC versions prior to V100R003C00SPC515 Huawei iBMC versions prior to V100R003C10SPC102 Huawei iBMC versions prior to V100R003C00SPC610

Description The issue allows remote attackers to decrypt encrypted data, potentially obtaining sensitive information, by leveraging the selection of an insecure SSL encryption algorithm.

Recommendations For versions prior to V100R003C00SPC613, update to V100R003C00SPC613 or later. For versions prior to V100R003C00SPC617, update to V100R003C00SPC617 or later. For versions prior to V100R003C00SPC515, update to V100R003C00SPC515 or later. For versions prior to V100R003C10SPC102, update to V100R003C10SPC102 or later. For versions prior to V100R003C00SPC610, update to V100R003C00SPC610 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-310

CWE-200

Identificadores relacionados

CVE-2016-6899

Produtos afetados

Huawei Ibmc

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-6899 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6899 · Nota de Segurança
• http://securityfocus.com/bid/92623 · Nota