What’s Vulnerable › Vulnerabilities

CVE-2016-6900

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-09-07 · updated 2026-06-17
• Weakness: CWE-399

Description

The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors.

Affected products

• Huawei Rh1288 V3 Server Firmware: v100r003c00
• Huawei Rh2288 V3 Server Firmware: v100r003c00
• Huawei Rh2288H V3 Server Firmware: v100r003c00
• Huawei Rh5885 V3 Server Firmware: v100r003c01
• Huawei Xh620 V3 Server Firmware: v100r003c00
• Huawei Xh622 V3 Server Firmware: v100r003c00
• Huawei Xh628 V3 Server Firmware: v100r003c00

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en

Get alerted when CVE-2016-6900 or the next vulnerability affects your stack