High severity · published Apr 2, 2017
CVE-2016-2404
Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software…
7.5
CVSS
0.8%
EPSS
No
On KEV
Description
Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Acu2 Firmware · Huawei
v200r005c00spc500; v200r006c00 · source: NVD
SF
S12700 Firmware · Huawei
v200r005c00spc500; v200r006c00 · source: NVD
SF
S5700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc300; v200r005c00spc500; v200r006c00 · source: NVD
SF
S6700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc300; v200r005c00spc500; v200r006c00 · source: NVD
SF
S7700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc300; v200r005c00spc500; v200r006c00 · source: NVD
SF
S9700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc300; v200r005c00spc500; v200r006c00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-2404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-2404
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160217-01-switch-en
More from Acu2 Firmware
6.5
CVE-2016-6824
Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart)…