Medium · 6.4 CVE-2022-48616 EUVD-2022-51311GHSA-p7xv-5v8m-5xcw

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attacker…

Published Dec 12, 2023 · Updated Aug 3, 2024 · Assigned by huawei

Vendor: Huawei Product: AR6000 Category: Network devices

Description

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges.

Affected products

Vendor	Product	Affected	Fixed
Huawei	AR6000	AR6000 V300R019C10SPC300, AR6000 V300R019C13SPC200, AR6000 V300R021C00SPC200, AR6000 V300R021C10SPC100	—

Advisories 1

WID-SEC-2023-3108 Huawei NetEngine: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 11, 2023

References

https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/