CVE-2016-5234 Memory corruption in n/a
Remote attackers can execute arbitrary code on Huawei video conferencing devices via crafted packets when a specific service is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5234?
CVE-2016-5234 is a high-severity memory corruption vulnerability in n/a, published on 13 Jun 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054.
Weakness: CWE-119
Which versions are affected by CVE-2016-5234?
It affects 2 products.
Products include Huawei Rse6500 Firmware, Huawei Vp9600 Series Firmware.
How do I fix CVE-2016-5234?
No fix has been published for CVE-2016-5234 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-5234 being exploited?
There is no known exploitation of CVE-2016-5234 in the wild and no public exploit code.
Sources
Also known as GHSA-f65p-697p-wwf4.