CVE-2016-6838

EPSS 0.97%
Veröffentlicht 07.09.2016 19:28:15
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, CH140 V3 and CH226 V3 servers with software before V100R001C00SPC122, CH220 V3 servers with software before V100R001C00SPC201, and CH121 V3 and CH222 V3 servers with software before V100R001C00SPC202 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSH encryption algorithm.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 9 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Rh1288 V3 Server Firmware Version v100r003c00

   Huawei ≫ Rh1288 V3 Server Version -
   Huawei ≫ Rh2288 V3 Server Version -
   Huawei ≫ X6800 V3 Server Version -
   Huawei ≫ Xh620 V3 Server Version -

Huawei ≫ Rh2288 V3 Server Firmware Version v100r003c00

   Huawei ≫ Rh1288 V3 Server Version -
   Huawei ≫ Rh2288 V3 Server Version -
   Huawei ≫ X6800 V3 Server Version -
   Huawei ≫ Xh620 V3 Server Version -

Huawei ≫ X6800 V3 Server Firmware Version v100r003c00

   Huawei ≫ Rh1288 V3 Server Version -
   Huawei ≫ Rh2288 V3 Server Version -
   Huawei ≫ X6800 V3 Server Version -
   Huawei ≫ Xh620 V3 Server Version -

Huawei ≫ Xh620 V3 Server Firmware Version v100r003c00

   Huawei ≫ Rh1288 V3 Server Version -
   Huawei ≫ Rh2288 V3 Server Version -
   Huawei ≫ X6800 V3 Server Version -
   Huawei ≫ Xh620 V3 Server Version -

Huawei ≫ Ch121 V3 Server Firmware Version v100r001c00

   Huawei ≫ Ch121 V3 Server Version -
   Huawei ≫ Ch140 V3 Server Version -
   Huawei ≫ Ch220 V3 Server Version -
   Huawei ≫ Ch222 V3 Server Version -
   Huawei ≫ Ch226 V3 Server Version -

Huawei ≫ Ch140 V3 Server Firmware Version v100r001c00

   Huawei ≫ Ch121 V3 Server Version -
   Huawei ≫ Ch140 V3 Server Version -
   Huawei ≫ Ch220 V3 Server Version -
   Huawei ≫ Ch222 V3 Server Version -
   Huawei ≫ Ch226 V3 Server Version -

Huawei ≫ Ch220 V3 Server Firmware Version v100r001c00

   Huawei ≫ Ch121 V3 Server Version -
   Huawei ≫ Ch140 V3 Server Version -
   Huawei ≫ Ch220 V3 Server Version -
   Huawei ≫ Ch222 V3 Server Version -
   Huawei ≫ Ch226 V3 Server Version -

Huawei ≫ Ch222 V3 Server Firmware Version v100r001c00

   Huawei ≫ Ch121 V3 Server Version -
   Huawei ≫ Ch140 V3 Server Version -
   Huawei ≫ Ch220 V3 Server Version -
   Huawei ≫ Ch222 V3 Server Version -
   Huawei ≫ Ch226 V3 Server Version -

Huawei ≫ Ch226 V3 Server Firmware Version v100r001c00

   Huawei ≫ Ch121 V3 Server Version -
   Huawei ≫ Ch140 V3 Server Version -
   Huawei ≫ Ch220 V3 Server Version -
   Huawei ≫ Ch222 V3 Server Version -
   Huawei ≫ Ch226 V3 Server Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.97%	0.572

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-02-server-en

Vendor Advisory

http://www.securityfocus.com/bid/92503

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-6838

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6838

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6838

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-6838