CVE-2016-6900

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-6900
The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:rh1288_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:rh2288_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:rh2288h_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:xh620_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:xh622_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:xh628_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*
OR cpe:2.3:h:huawei:rh1288_v3_server:-:*:*:*:*:*:*:*
cpe:2.3:h:huawei:rh2288_v3_server:-:*:*:*:*:*:*:*
cpe:2.3:h:huawei:rh2288h_v3_server:-:*:*:*:*:*:*:*
cpe:2.3:h:huawei:xh620_v3_server:-:*:*:*:*:*:*:*
cpe:2.3:h:huawei:xh622_v3_server:-:*:*:*:*:*:*:*
cpe:2.3:h:huawei:xh628_v3_server:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:huawei:rh5885_v3_server_firmware:v100r003c01:*:*:*:*:*:*:*
cpe:2.3:h:huawei:rh5885_v3_server:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2016-09-07 19:28

Updated : 2023-12-10 11:46

NVD link : CVE-2016-6900

Mitre link : CVE-2016-6900

CVE.ORG link : CVE-2016-6900

JSON object : View

Products Affected

huawei

  • xh622_v3_server_firmware
  • xh620_v3_server_firmware
  • rh1288_v3_server
  • rh2288_v3_server_firmware
  • rh5885_v3_server
  • rh2288h_v3_server_firmware
  • rh1288_v3_server_firmware
  • xh622_v3_server
  • xh620_v3_server
  • xh628_v3_server
  • rh2288h_v3_server
  • rh2288_v3_server
  • rh5885_v3_server_firmware
  • xh628_v3_server_firmware
CWE
CWE-399

Resource Management Errors