CVE-2016-6901: Input Validation
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6901?
CVE-2016-6901 is considered a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2016-6901?
To mitigate CVE-2016-6901, update the affected Huawei routers to firmware version V200R007C00SPC900 or later.
Which devices are affected by CVE-2016-6901?
CVE-2016-6901 affects multiple Huawei AR series routers and NetEngine 16EX routers running software versions before V200R007C00SPC900.
Can CVE-2016-6901 be exploited remotely?
Yes, CVE-2016-6901 allows remote authenticated users to exploit the vulnerability.
Are there any known exploits for CVE-2016-6901?
There are currently no specific publicly known exploits targeting CVE-2016-6901, but its denial of service capability poses risks.