CVE-2016-2404

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 62.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Huawei Acu2 FirmwareHuawei S12700 FirmwareHuawei S5700 Firmware+3 more
Timeline
PublishedApr 2
Latest updateMay 17

Description

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, r…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages6 packages

▶NVDhuawei/acu2_firmwarev200r005c00spc500, v200r006c00+1
▶NVDhuawei/s5700_firmware5 versions+4
▶NVDhuawei/s6700_firmware5 versions+4
▶NVDhuawei/s7700_firmware5 versions+4
▶NVDhuawei/s9700_firmware5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-65qg-pq7p-5fvp: Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S127↗2022-05-17
▶
CVEList
CVE-2016-2404: Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S127↗2017-04-02
▶
CVE-2016-2404 (HIGH CVSS 7.5) | Huawei switches S5700 | cvebase.io