CVE-2015-6586

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-23 · updated 2026-06-17
Weakness: CWE-200

Description

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.

Affected products

Huawei Wlan Ac6005 Firmware: through v200r005c00; through v200r005c10; through v200r006c00
Huawei Wlan Ac6605 Firmware: through v200r005c00; through v200r005c10; through v200r006c00
Huawei Wlan Acu2 Firmware: through v200r005c00; through v200r005c10; through v200r006c00

References

http://www.securityfocus.com/bid/76684
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm
http://www.securityfocus.com/bid/76684
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm

Get alerted when CVE-2015-6586 or the next vulnerability affects your stack