CVE-2016-6825

Critical

Published: 07/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Huawei XH620 V3, XH622 V3, XH628 V3, RH1288 V3, RH2288 V3, and RH2288H V3 servers with software before V100R003C00SPC610, V100R003C00SPC613, V100R003C00SPC617, and V100R003C00SPC515 are vulnerable to brute-force attacks, allowing remote attackers to obtain passwords due to a lack of authentication protection mechanisms.

Risk Assessment

The absence of adequate authentication protection mechanisms exposes the organization to the risk of unauthorized access to systems, potentially leading to data loss or infrastructure compromise.

Recommendation

It is recommended to update the server software to the latest version to patch this vulnerability and implement additional authentication protection mechanisms.

Original NVD description (English source)

Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtain passwords via a brute-force attack, related to "lack of authentication protection mechanisms."