Security Advisory - Weak Encryption Algorithm Vulnerability in Huawei Servers

Some Huawei servers have a weak encryption algorithm vulnerability in the iBMC (Intelligent Baseboard Management Controller). The software provide an option for users to select SSL encryption algorithms. If an insecure encryption algorithm is selected, an attacker may decrypt encrypted data, causing information leaks. (Vulnerability ID: HWPSIRT-2016-07019)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6899.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en&gt;