Improper input validation in Huawei Ar100

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 all…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (46.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

  • 92618 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-6901?
CVE-2016-6901 is a medium-severity vulnerability in Huawei Ar100, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2016-09-26.
How severe is CVE-2016-6901?
Medium severity. CVSS v3 base score is 6.5 out of 10.