CVE-2016-6901
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.
Affected (6)
Products: Huawei: Ar Firmware, Netengine 16ex Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar100 | All versions |
Huawei Ar120 | All versions |
Huawei Ar1200 | All versions |
Huawei Ar150 | All versions |
Huawei Ar200 | All versions |
Huawei Ar2200 | All versions |
Huawei Ar2500 | All versions |
Huawei Ar3200 | All versions |
Huawei Ar3600 | All versions |
Huawei Ar500 | All versions |
Huawei Ar550 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005 |
| Running on/with | Platform Versions |
|---|---|
Huawei Netengine 16ex | All versions |
References (4)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Timeline
No history available yet.