Vulnerability CVE-2015-6586


Published: 2017-05-23

Description:
The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Huawei -> Wlan ac6605 firmware 
Huawei -> Wlan acu2 firmware 
Huawei -> Wlan ac6005 firmware 

 References:
http://www.securityfocus.com/bid/76684
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm

Copyright 2024, cxsecurity.com

 

Back to Top