Lucene search

K
cve[email protected]CVE-2016-5234
HistoryJun 13, 2016 - 2:59 p.m.

CVE-2016-5234

2016-06-1314:59:09
CWE-119
web.nvd.nist.gov
20
huawei
buffer overflow
multipoint control unit
remote code execution
cve-2016-5234
hwpsirt-2016-05054
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054.

Affected configurations

NVD
Node
huaweirse6500Match-
AND
huaweirse6500_firmwareMatchv100r001c00
Node
huaweivp9600_series_firmwareMatchv200r001c01
OR
huaweivp9600_series_firmwareMatchv200r001c02
OR
huaweivp9600_series_firmwareMatchv200r001c30
AND
huaweivp9630Match-
OR
huaweivp9650Match-
OR
huaweivp9660Match-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Related for CVE-2016-5234