CVE-2016-2231

Critical

Published: 15/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a length field that is consistent with a buffer size. This allows remote attackers to cause a denial of service (device outage) or possibly have unspecified other impact via crafted traffic on TCP port 8701.

Risk Assessment

Attackers can exploit this vulnerability to trigger device outages, leading to service availability disruptions. This may affect organizational operations and user trust.

Recommendation

It is recommended to monitor traffic on TCP port 8701 and implement appropriate security measures to mitigate the risk of this vulnerability.

Original NVD description (English source)

The Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a length field that is consistent with a buffer size, which allows remote attackers to cause a denial of service (device outage) or possibly have unspecified other impact via crafted traffic on TCP port 8701.