Security Advisory - XXE Vulnerability in the E9000

E9000 has an XML External Entity (XXE) vulnerability when parsing user-supplied XML documents in HMM (Hyper Management Module). Attackers could exploit this vulnerability to read arbitrary files and cause a denial of the web service. (Vulnerability ID: HWPSIRT-2016-05249)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6898

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en&gt;