CVE-2016-5234
Severity Score
8.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054.
Desbordamiento del buffer en dispositivos Huawei VP9660, VP9650 y VP9630 multipoint control unit en versiones anteriores a V500R002C00SPC200 y dispositivos de videoconferenia RSE6500 en versiones anteriores a V500R002C00SPC100, cuando un servicio no especificado está activado, permite a atacantes remotos ejecutar código arbitrario a través de un paquete manipulado, también conocido como HWPSIRT-2016-05054.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-06-01 CVE Reserved
- 2016-06-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/90978 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en | 2016-11-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Rse6500 Firmware Search vendor "Huawei" for product "Rse6500 Firmware" | v100r001c00 Search vendor "Huawei" for product "Rse6500 Firmware" and version "v100r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rse6500 Search vendor "Huawei" for product "Rse6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c01 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9630 Search vendor "Huawei" for product "Vp9630" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c01 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9650 Search vendor "Huawei" for product "Vp9650" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c01 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9660 Search vendor "Huawei" for product "Vp9660" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c02 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9630 Search vendor "Huawei" for product "Vp9630" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c02 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9650 Search vendor "Huawei" for product "Vp9650" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c02 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9660 Search vendor "Huawei" for product "Vp9660" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c30 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9630 Search vendor "Huawei" for product "Vp9630" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c30 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9650 Search vendor "Huawei" for product "Vp9650" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9600 Series Firmware Search vendor "Huawei" for product "Vp9600 Series Firmware" | v200r001c30 Search vendor "Huawei" for product "Vp9600 Series Firmware" and version "v200r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9660 Search vendor "Huawei" for product "Vp9660" | - | - |
Safe
|