PT-2016-6319 · Huawei · Huawei Vp9630+3

Published 2016-06-13 · Updated 2016-11-28 · CVE-2016-5234

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei VP9660 versions prior to V500R002C00SPC200 Huawei VP9650 versions prior to V500R002C00SPC200 Huawei VP9630 versions prior to V500R002C00SPC200 Huawei RSE6500 versions prior to V500R002C00SPC100

Description The issue is related to a buffer overflow that can be triggered when an unspecified service is enabled. This allows remote attackers to execute arbitrary code via a crafted packet.

Recommendations For Huawei VP9660 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei VP9650 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei VP9630 versions prior to V500R002C00SPC200, update to V500R002C00SPC200 or later. For Huawei RSE6500 versions prior to V500R002C00SPC100, update to V500R002C00SPC100 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-5234

Affected Products

Huawei Rse6500

Huawei Vp9630

Huawei Vp9650

Huawei Vp9660

References · 4

• https://osv.dev/vulnerability/CVE-2016-5234 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5234 · Security Note
• http://securityfocus.com/bid/90978 · Note