CVE-2012-6569 Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S560...
HighCVSS 9.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei ar 18-1x | <= r0130 | No fix listed |
| Huawei ar 18-2x | <= r1712 | No fix listed |
| Huawei ar 18-3x | <= r0118 | No fix listed |
| Huawei ar 192949 | <= r2207 | No fix listed |
| Huawei ar 2846 | <= r0311 | No fix listed |
| Huawei s2000 | = r6305 | No fix listed |
| Huawei s2300 | = r6305 | No fix listed |
| Huawei s2700 | = r6305 | No fix listed |
| Huawei s3000 | = r6305 | No fix listed |
| Huawei s3300 | = r6305 | No fix listed |
| Huawei s3300hi | = r6305 | No fix listed |
| Huawei s3500 | = r6305 | No fix listed |
| Huawei s3700 | = r6305 | No fix listed |
| Huawei s3900 | = r6305 | No fix listed |
| Huawei s5100 | = r6305 | No fix listed |
| Huawei s5600 | = r6305 | No fix listed |
| Huawei s7800 | = r6305 | No fix listed |
| Huawei s8500 | = r1631 | No fix listed |
| Huawei s8500 | = r1632 | No fix listed |
References
- www.huawei.com vendor-advisory