CVE-2016-6899

EPSS 0.97%
Veröffentlicht 07.09.2016 19:28:20
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Rh5885 V3 Server Firmware Version v100r003c01

Huawei ≫ Rh5885 V3 Server Version -

Huawei ≫ Rh1288 V3 Server Firmware Version v100r003c00

   Huawei ≫ Rh1288 V3 Server Version -
   Huawei ≫ Rh2288 V3 Server Version -
   Huawei ≫ Rh2288h V3 Server Version -
   Huawei ≫ Xh620 V3 Server Version -
   Huawei ≫ Xh622 V3 Server Version -
   Huawei ≫ Xh628 V3 Server Version -

Huawei ≫ Rh2288 V3 Server Firmware Version v100r003c00

Huawei ≫ Rh2288h V3 Server Firmware Version v100r003c00

Huawei ≫ Xh620 V3 Server Firmware Version v100r003c00

Huawei ≫ Xh622 V3 Server Firmware Version v100r003c00

Huawei ≫ Xh628 V3 Server Firmware Version v100r003c00

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.97%	0.572

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en

Vendor Advisory

http://www.securityfocus.com/bid/92623

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-6899

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6899

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6899

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-6899