CVEvulnerability
CVE-2015-6586
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-05-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.
Affected configurations
• huawei wlan acu2 firmware (<= v200r005c00)
• huawei wlan acu2 firmware (<= v200r005c10)
• huawei wlan acu2 firmware (<= v200r006c00)
• huawei wlan ac6005 firmware (<= v200r005c00)
• huawei wlan ac6005 firmware (<= v200r005c10)
• huawei wlan ac6005 firmware (<= v200r006c00)
• huawei wlan ac6605 firmware (<= v200r005c00)
• huawei wlan ac6605 firmware (<= v200r005c10)
• huawei wlan ac6605 firmware (<= v200r006c00)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/76684 Third Party Advisory, VDB Entry
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/76684 Third Party Advisory, VDB Entry
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm Mitigation, Vendor Advisory