Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-2404

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.

Published

2017-04-02T20:59:00.860

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei s5700_firmware v200r001c00spc300 Yes
Operating System huawei s5700_firmware v200r002c00spc100 Yes
Operating System huawei s5700_firmware v200r003c00spc300 Yes
Operating System huawei s5700_firmware v200r005c00spc500 Yes
Operating System huawei s5700_firmware v200r006c00 Yes
Hardware huawei s5700 - No
Operating System huawei s6700_firmware v200r001c00spc300 Yes
Operating System huawei s6700_firmware v200r002c00spc100 Yes
Operating System huawei s6700_firmware v200r003c00spc300 Yes
Operating System huawei s6700_firmware v200r005c00spc500 Yes
Operating System huawei s6700_firmware v200r006c00 Yes
Hardware huawei s6700 - No
Operating System huawei s7700_firmware v200r001c00spc300 Yes
Operating System huawei s7700_firmware v200r002c00spc100 Yes
Operating System huawei s7700_firmware v200r003c00spc300 Yes
Operating System huawei s7700_firmware v200r005c00spc500 Yes
Operating System huawei s7700_firmware v200r006c00 Yes
Hardware huawei s7700 - No
Operating System huawei s9700_firmware v200r001c00spc300 Yes
Operating System huawei s9700_firmware v200r002c00spc100 Yes
Operating System huawei s9700_firmware v200r003c00spc300 Yes
Operating System huawei s9700_firmware v200r005c00spc500 Yes
Operating System huawei s9700_firmware v200r006c00 Yes
Hardware huawei s9700 - No
Operating System huawei s12700_firmware v200r005c00spc500 Yes
Operating System huawei s12700_firmware v200r006c00 Yes
Hardware huawei s12700 - No
Operating System huawei acu2_firmware v200r005c00spc500 Yes
Operating System huawei acu2_firmware v200r006c00 Yes
Hardware huawei acu2 - No
References