PT-2013-2024 · Huawei · Huawei Bims+9
Felix Lindner
·
Published
2013-06-20
·
Updated
2013-06-21
·
CVE-2012-6570
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Huawei BIMS and web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches (affected versions not specified)
Description
The issue concerns the HTTP module in the affected systems, which fails to validate the length of HTTP data against the Content-Length field. This oversight allows remote HTTP servers to launch heap-based buffer overflow attacks, potentially leading to the execution of arbitrary code through crafted responses.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Huawei Ar Routers
Huawei Bims
S2000
S3000
S3500
S3900
S5100
S5600
S7800
S8500