Vulnerability CVE-2016-6159
Published: 2016-09-21

Description:
The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special packages" to the LAN interface.

CVSS2 => (AV:A/AC:H/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
10/10
3.2/10
Exploit range
Attack complexity
Authentication
Adjacent network
High
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Huawei -> Ws331a router firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en
Copyright 2024, cxsecurity.com

 

Back to Top