← Back

CVE-2016-5234

nvd nist
Published: Jun 13, 2016Modified: May 6, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054.

Affected (4)

Huawei
2 products
Rse6500 Firmware
Vp9600 Series Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rse6500 Firmware
Version v100r001c00
Running on/withPlatform Versions
Huawei
Rse6500
All versions
Configuration B
3 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Huawei
Vp9600 Series Firmware
Version v200r001c01
Vp9600 Series Firmware
Version v200r001c02
Vp9600 Series Firmware
Version v200r001c30
Running on/withPlatform Versions
Huawei
Vp9630
All versions
Huawei
Vp9650
All versions
Huawei
Vp9660
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.