Huawei Acu2 Firmware vulnerabilities

2 known vulnerabilities affecting huawei/acu2_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2016-2404HIGHCVSS 7.5vv200r005c00spc500vv200r006c002017-04-02

CVE-2016-2404 [HIGH] CWE-264 CVE-2016-2404: Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting

CVE-2016-6824MEDIUMCVSS 6.5≤ v200r005c10≤ v200r006c002016-09-22

CVE-2016-6824 [MEDIUM] CWE-20 CVE-2016-6824: Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 al Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets.