7.5

CVE-2016-6899

EPSS 0.07%
Veröffentlicht 07.09.2016 19:28:20
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Rh5885 V3 Server Firmware Versionv100r003c01

Huawei ≫ Rh5885 V3 Server Version-

Huawei ≫ Rh1288 V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Huawei ≫ Rh2288 V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Huawei ≫ Rh2288h V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Huawei ≫ Xh620 V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Huawei ≫ Xh622 V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Huawei ≫ Xh628 V3 Server Firmware Versionv100r003c00

   Huawei ≫ Rh1288 V3 Server Version-
   Huawei ≫ Rh2288 V3 Server Version-
   Huawei ≫ Rh2288h V3 Server Version-
   Huawei ≫ Xh620 V3 Server Version-
   Huawei ≫ Xh622 V3 Server Version-
   Huawei ≫ Xh628 V3 Server Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.22

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en

Vendor Advisory

http://www.securityfocus.com/bid/92623

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-6899

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6899

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6899

EUVD