Permission Control Vulnerability in Huawei Switches
CVE-2016-2404
Key Information:
Summary
Huawei switches, including the S5700, S6700, S7700, S9700, S12700, and ACU2 series, have been identified with a permission control vulnerability impacting Authentication, Authorization, and Accounting (AAA) systems. When AAA is enabled and user permissions are not correctly configured, unauthorized AAA users can gain virtual terminal (VTY) access privileges, which may lead to privilege escalation. This poses significant security risks, as it allows potential exploitation of the network infrastructure. Users are advised to review their configuration settings and apply necessary updates.
Affected Version(s)
S5700, S6700, S7700, S9700,S12700,ACU2,, S5700, S6700, S7700, S9700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00,,S12700 V200R005C00SPC500, V200R006C00,,ACU2 V200R005C00SPC500, V200R006C00, S5700, S6700, S7700, S9700,S12700,ACU2,, S5700, S6700, S7700, S9700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00,,S12700 V200R005C00SPC500, V200R006C00,,ACU2 V200R005C00SPC500, V200R006C00,
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved