Login Request a demo
Medium severity · published Sep 26, 2016
CVE-2016-6901
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and…
6.5
CVSS
1%
EPSS
No
On KEV
Description
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
AR Firmware · Huawei
v200r005; v200r006; v200r007c00 · source: NVD
N1
Netengine 16ex Firmware · Huawei
v200r005; v200r006; v200r007c00 · source: NVD
Affected product
AF
AR Firmware
Huawei
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6901
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6901
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en
Third Party Advisory
http://www.securityfocus.com/bid/92618
More from AR Firmware
4.9
CVE-2015-8086
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300,…
4.9
CVE-2015-8085
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300,…
–
CVE-2015-8228
Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote…