← Back

CVE-2012-6570

nvd nist
Published: Jun 20, 2013Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.

Affected (19)

Huawei
18 products
Ar 18 1x
Ar 18 2x
Ar 18 3x
Ar 19/29/49
Ar 28/46
S2000
S2300
S2700
S3000
S3300
S3300hi
S3500
S3700
S3900
S5100
S5600
S7800
S8500
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Ar 18 1x
Up to r0130
Ar 18 2x
Up to r1712
Ar 18 3x
Up to r0118
Ar 19/29/49
Up to r2207
Ar 28/46
Up to r0311
Configuration B
14 vulnerable
Vulnerable SoftwareAffected Versions
S2000
Version r6305
S2300
Version r6305
S2700
Version r6305
S3000
Version r6305
S3300
Version r6305
S3300hi
Version r6305
S3500
Version r6305
S3700
Version r6305
S3900
Version r6305
S5100
Version r6305
S5600
Version r6305
S7800
Version r6305
Huawei
S8500
Version r1631
S8500
Version r1632

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.