PT-2016-5075 · Microsoft+1 · Windows+1

Déborah Valeria Higa · Published 2016-02-15 · Updated 2016-03-10 · CVE-2016-2231

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei SmartAX MT882 devices version V200R002B022 Arg

Description The issue affects the Windows-based Host Interface Program (WHIP) service, which relies on the client to send a length field consistent with a buffer size. This allows remote attackers to cause a denial of service (device outage) or possibly have unspecified other impact via crafted traffic on TCP port 8701, specifically the /api endpoint is not mentioned but the TCP port 8701 is vulnerable.

Recommendations For Huawei SmartAX MT882 devices version V200R002B022 Arg, consider restricting access to TCP port 8701 as a temporary workaround until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2016-2231

Affected Products

Huawei Smartax Mt882

Windows

References · 3

• 🔥 https://debihiga.wordpress.com/sa-whip · Exploit
• https://osv.dev/vulnerability/CVE-2016-2231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2231 · Security Note