PT-2016-7158 · Huawei · Ibmc

Published 2016-09-07 · Updated 2016-09-08 · CVE-2016-6900

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei iBMC versions prior to V100R003C00SPC613 in RH1288 V3 servers Huawei iBMC versions prior to V100R003C00SPC617 in RH2288 V3 servers Huawei iBMC versions prior to V100R003C00SPC515 in RH2288H V3 servers Huawei iBMC versions prior to V100R003C10SPC102 in RH5885 V3 servers Huawei iBMC versions prior to V100R003C00SPC610 in XH620 V3, XH622 V3, and XH628 V3 servers

Description The issue allows local users to cause a denial of service by consuming iBMC resources via unspecified vectors.

Recommendations For RH1288 V3 servers, update the software to V100R003C00SPC613 or later. For RH2288 V3 servers, update the software to V100R003C00SPC617 or later. For RH2288H V3 servers, update the software to V100R003C00SPC515 or later. For RH5885 V3 servers, update the software to V100R003C10SPC102 or later. For XH620 V3, XH622 V3, and XH628 V3 servers, update the software to V100R003C00SPC610 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-6900

Affected Products

Ibmc

References · 3

• https://osv.dev/vulnerability/CVE-2016-6900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6900 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en · Vendor Advisory