PT-2016-7158 · Huawei · Ibmc

Publicado 2016-09-07 · Atualizado 2016-09-08 · CVE-2016-6900

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei iBMC versions prior to V100R003C00SPC613 in RH1288 V3 servers Huawei iBMC versions prior to V100R003C00SPC617 in RH2288 V3 servers Huawei iBMC versions prior to V100R003C00SPC515 in RH2288H V3 servers Huawei iBMC versions prior to V100R003C10SPC102 in RH5885 V3 servers Huawei iBMC versions prior to V100R003C00SPC610 in XH620 V3, XH622 V3, and XH628 V3 servers

Description The issue allows local users to cause a denial of service by consuming iBMC resources via unspecified vectors.

Recommendations For RH1288 V3 servers, update the software to V100R003C00SPC613 or later. For RH2288 V3 servers, update the software to V100R003C00SPC617 or later. For RH2288H V3 servers, update the software to V100R003C00SPC515 or later. For RH5885 V3 servers, update the software to V100R003C10SPC102 or later. For XH620 V3, XH622 V3, and XH628 V3 servers, update the software to V100R003C00SPC610 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-6900

Produtos afetados

Ibmc

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-6900 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6900 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en · Aviso do Fabricante