CVE-2016-6825

Description

Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtain passwords via a brute-force attack, related to lack of authentication protection mechanisms.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.786

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-6825 ,CVE-2016-6838 ,CVE-2016-6900 are affected in rh1288_v3_server_firmware v100r003c00	NCM
Vulnerabilities CVE-2016-6825 ,CVE-2016-6900 are affected in rh2288h_v3_server_firmware v100r003c00	NCM
Vulnerabilities CVE-2016-6825 ,CVE-2016-6838 ,CVE-2016-6900 are affected in rh2288_v3_server_firmware v100r003c00	NCM
Vulnerabilities CVE-2016-6825 ,CVE-2016-6838 ,CVE-2016-6900 are affected in xh620_v3_server_firmware v100r003c00	NCM
Vulnerabilities CVE-2016-6825 ,CVE-2016-6900 are affected in xh622_v3_server_firmware v100r003c00	NCM
Vulnerabilities CVE-2016-6825 ,CVE-2016-6900 are affected in xh628_v3_server_firmware v100r003c00	NCM
Improper Authorization Vulnerability (CVE-2016-6825)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234