Vulnerabilities > CVE-2016-6900 - Resource Management Errors vulnerability in Huawei products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

huawei

CWE-399

NVD

Published: 2016-09-07

Updated: 2016-09-08

Summary

The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Rh1288 V3 Server Firmware V100R003C00 Huawei Rh2288 V3 Server Firmware V100R003C00 Huawei Rh2288H V3 Server Firmware V100R003C00 Huawei Xh620 V3 Server Firmware V100R003C00 Huawei Xh622 V3 Server Firmware V100R003C00 Huawei Xh628 V3 Server Firmware V100R003C00 Huawei Rh5885 V3 Server Firmware V100R003C01	7
Hardware	Huawei Huawei Rh1288 V3 Server - Huawei Rh2288 V3 Server - Huawei Rh2288H V3 Server - Huawei Xh620 V3 Server - Huawei Xh622 V3 Server - Huawei Xh628 V3 Server - Huawei Rh5885 V3 Server -	7

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en