7.5

CVE-2015-6586

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Wlan Acu2 Firmware Version <= v200r005c00
   Huawei ≫ Wlan Acu2 Version -
Huawei ≫ Wlan Acu2 Firmware Version <= v200r005c10
   Huawei ≫ Wlan Acu2 Version -
Huawei ≫ Wlan Acu2 Firmware Version <= v200r006c00
   Huawei ≫ Wlan Acu2 Version -
Huawei ≫ Wlan Ac6005 Firmware Version <= v200r005c00
   Huawei ≫ Wlan Ac6005 Version -
Huawei ≫ Wlan Ac6005 Firmware Version <= v200r005c10
   Huawei ≫ Wlan Ac6005 Version -
Huawei ≫ Wlan Ac6005 Firmware Version <= v200r006c00
   Huawei ≫ Wlan Ac6005 Version -
Huawei ≫ Wlan Ac6605 Firmware Version <= v200r005c00
   Huawei ≫ Wlan Ac6605 Version -
Huawei ≫ Wlan Ac6605 Firmware Version <= v200r005c10
   Huawei ≫ Wlan Ac6605 Version -
Huawei ≫ Wlan Ac6605 Firmware Version <= v200r006c00
   Huawei ≫ Wlan Ac6605 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.669
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/bid/76684
Third Party Advisory
VDB Entry
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm
Vendor Advisory
Mitigation