PT-2015-7304 · Huawei · Huawei Wlan Ac6005+3

Published 2015-09-09 · Updated 2017-06-07 · CVE-2015-6586

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei WLAN AC6005 versions prior to V200R006C00SPC100 Huawei WLAN AC6605 versions prior to V200R006C00SPC100 Huawei WLAN ACU2 versions prior to V200R006C00SPC100

Description The issue concerns the mDNS module in Huawei WLAN AC products, which fails to restrict processing of mDNS unicast queries to the link local network. This allows remote attackers to obtain sensitive information by sending mDNS unicast queries from outside the link local network, such as the WAN.

Recommendations For Huawei WLAN AC6005 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later. For Huawei WLAN AC6605 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later. For Huawei WLAN ACU2 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-6586

Affected Products

Huawei Vrp

Huawei Wlan Ac6005

Huawei Wlan Ac6605

Huawei Wlan Acu2

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6586 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6586 · Security Note
• https://huawei.com/en/psirt/security-advisories/hw-453516 · Note
• http://securityfocus.com/bid/76684 · Note