Heap-Based Buffer Overflow in Huawei AR Routers and S-Series Switches

CVE-2012-6570

Summary

The HTTP module within Huawei's Branch Intelligent Management System (BIMS) and its web management components lacks proper validation of the Content-Length field in HTTP responses. This oversight can allow remote HTTP servers to exploit the system, potentially leading to heap-based buffer overflow attacks. An attacker could leverage this weakness to execute arbitrary code on the affected devices, posing significant security threats to network integrity.

References