Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.

Published

2016-09-26T16:59:08.040

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei ar_firmware v200r005 Yes
Operating System huawei ar_firmware v200r006 Yes
Operating System huawei ar_firmware v200r007c00 Yes
Hardware huawei ar100 - No
Hardware huawei ar120 - No
Hardware huawei ar1200 - No
Hardware huawei ar150 - No
Hardware huawei ar200 - No
Hardware huawei ar2200 - No
Hardware huawei ar2500 - No
Hardware huawei ar3200 - No
Hardware huawei ar3600 - No
Hardware huawei ar500 - No
Hardware huawei ar550 - No
Operating System huawei netengine_16ex_firmware v200r005 Yes
Operating System huawei netengine_16ex_firmware v200r006 Yes
Operating System huawei netengine_16ex_firmware v200r007c00 Yes
Hardware huawei netengine_16ex - No
References