PT-2015-7304
CVE-2015-6586
·
تاريخ النشر
2015-09-09
·
تاريخ التحديث
2017-06-07
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Huawei WLAN AC6005 versions prior to V200R006C00SPC100
Huawei WLAN AC6605 versions prior to V200R006C00SPC100
Huawei WLAN ACU2 versions prior to V200R006C00SPC100
Description
The issue concerns the mDNS module in Huawei WLAN AC products, which fails to restrict processing of mDNS unicast queries to the link local network. This allows remote attackers to obtain sensitive information by sending mDNS unicast queries from outside the link local network, such as the WAN.
Recommendations
For Huawei WLAN AC6005 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later.
For Huawei WLAN AC6605 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later.
For Huawei WLAN ACU2 versions prior to V200R006C00SPC100, update to version V200R006C00SPC100 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾