CVE-2012-6570 The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches do...
HighCVSS 10.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei ar 18-1x | <= r0130 | No fix listed |
| Huawei ar 18-2x | <= r1712 | No fix listed |
| Huawei ar 18-3x | <= r0118 | No fix listed |
| Huawei ar 192949 | <= r2207 | No fix listed |
| Huawei ar 2846 | <= r0311 | No fix listed |
| Huawei s2000 | = r6305 | No fix listed |
| Huawei s2300 | = r6305 | No fix listed |
| Huawei s2700 | = r6305 | No fix listed |
| Huawei s3000 | = r6305 | No fix listed |
| Huawei s3300 | = r6305 | No fix listed |
| Huawei s3300hi | = r6305 | No fix listed |
| Huawei s3500 | = r6305 | No fix listed |
| Huawei s3700 | = r6305 | No fix listed |
| Huawei s3900 | = r6305 | No fix listed |
| Huawei s5100 | = r6305 | No fix listed |
| Huawei s5600 | = r6305 | No fix listed |
| Huawei s7800 | = r6305 | No fix listed |
| Huawei s8500 | = r1631 | No fix listed |
| Huawei s8500 | = r1632 | No fix listed |
References
- www.huawei.com vendor-advisory