CVE-2016-6839

Опубликовано: 07 сент. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en
Vendor Advisory
http://www.securityfocus.com/bid/92502
Third Party Advisory
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en
Vendor Advisory
http://www.securityfocus.com/bid/92502
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:huawei:fusionaccess:v100r005c10:*:*:*:*:*:*:*

cpe:2.3:a:huawei:fusionaccess:v100r005c20:*:*:*:*:*:*:*

cpe:2.3:a:huawei:fusionaccess:v100r005c30:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.0011

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-113

Связанные уязвимости

GHSA-3q32-62v8-wp6j