Security Advisory - Input Validation Vulnerability in Huawei Access Controllers

There is an input validation vulnerability in Huawei access controllers (AC). Due to the lack of input validation, an attacker may craft malformed Control And Provisioning of Wireless Access Points (CAPWAP) protocol packets and send them to the device, causing the device to restart. (Vulnerability ID: HWPSIRT-2016-06002)

__

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6824.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en&gt;