CVE-2016-2405

High

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Huawei Policy Center with software versions before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL.

Risk Assessment

The organization may experience significant disruptions in system operation and unauthorized access to resources, potentially leading to data loss or security breaches.

Recommendation

It is recommended to update Huawei Policy Center software to version V100R003C10SPC020 or later to mitigate this vulnerability.

Other vulnerabilities in Huawei Policy Center

CVE-2016-3675High
CVE-2016-3675 is an SQL injection vulnerability in Huawei Policy Center with software versions before V100R003C10SPC020. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases.

Original NVD description (English source)

Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL.