CVE Feed

    Dashboard / CVE / CVE-2016-2404

    CVE-2016-2404

    Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.

    Published:Apr 2, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 2, 2017
    EPSS Score:0.00165
    CVSS Score:7.5

    Affected Products

    Vendor
    Huawei
    Product
    Acu2
    Vendor
    Huawei
    Product
    Acu2 Firmware
    Vendor
    Huawei
    Product
    S12700
    Vendor
    Huawei
    Product
    S12700 Firmware
    Vendor
    Huawei
    Product
    S5700
    Vendor
    Huawei
    Product
    S5700 Firmware
    Vendor
    Huawei
    Product
    S6700
    Vendor
    Huawei
    Product
    S6700 Firmware
    Vendor
    Huawei
    Product
    S7700
    Vendor
    Huawei
    Product
    S7700 Firmware
    Vendor
    Huawei
    Product
    S9700
    Vendor
    Huawei
    Product
    S9700 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High