CVE-2016-6899
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm.
Intelligent Baseboard Management Controller (iBMC) en servidores Huawei RH1288 V3 con software anterior a V100R003C00SPC613, servidores RH2288 V3 con software anterior a V100R003C00SPC617, servidores RH2288H V3 con software anterior a V100R003C00SPC515, servidores RH5885 V3 con software anterior a V100R003C10SPC102 y XH620 V3, XH622 V3 y servidores XH628 V3 con software anterior a V100R003C00SPC610 podría permitir a atacantes remotos descepcriptar datos encriptados y consecuentemente obtener información sensible, mediante el aprovechamiento de la selección de un cifrado de algoritmo inseguro SSL.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-08-22 CVE Reserved
- 2016-09-07 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-310: Cryptographic Issues
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/92623 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en | 2016-09-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Rh5885 V3 Server Firmware Search vendor "Huawei" for product "Rh5885 V3 Server Firmware" | v100r003c01 Search vendor "Huawei" for product "Rh5885 V3 Server Firmware" and version "v100r003c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh5885 V3 Server Search vendor "Huawei" for product "Rh5885 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh1288 V3 Server Firmware Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh1288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288 V3 Server Firmware Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rh2288h V3 Server Firmware Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Rh2288h V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh620 V3 Server Firmware Search vendor "Huawei" for product "Xh620 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh620 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh622 V3 Server Firmware Search vendor "Huawei" for product "Xh622 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh622 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh1288 V3 Server Search vendor "Huawei" for product "Rh1288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288 V3 Server Search vendor "Huawei" for product "Rh2288 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rh2288h V3 Server Search vendor "Huawei" for product "Rh2288h V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh620 V3 Server Search vendor "Huawei" for product "Xh620 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh622 V3 Server Search vendor "Huawei" for product "Xh622 V3 Server" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Xh628 V3 Server Firmware Search vendor "Huawei" for product "Xh628 V3 Server Firmware" | v100r003c00 Search vendor "Huawei" for product "Xh628 V3 Server Firmware" and version "v100r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Xh628 V3 Server Search vendor "Huawei" for product "Xh628 V3 Server" | - | - |
Safe
|