CVE-2012-6570 | BDVDB-2026-56272 Detail

Description#

The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194361.htm

Exploit#

No public exploit known

History#

Version 12013-06-20Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.