CVE-2016-6179 Privilege escalation in n/a

High 7.0 Published Updated

Attackers can cause system crashes or gain privileges on Huawei Honor 6 devices via a crafted application exploiting the WiFi driver.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2016-6179?

CVE-2016-6179 is a high-severity vulnerability in n/a, published on 7 Sep 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

The WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60-L11 before H60-L11C00B850, H60-L21 before H60-L21C00B850, H60-L02 before H60-L02C00B850, H60-L12 before H60-L12C00B850, and H60-L03 before H60-L03C01B850 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application.

Weakness: CWE-284

Which versions are affected by CVE-2016-6179?

It affects 1 product.

Products include Huawei Honor 6 Firmware.

How do I fix CVE-2016-6179?

No fix has been published for CVE-2016-6179 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6179 being exploited?

There is no known exploitation of CVE-2016-6179 in the wild and no public exploit code.

Sources

Also known as GHSA-q49g-q9qj-46qw.

Is CVE-2016-6179 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free