CVE-2016-2231

CRITICAL

Huawei MT882 Firmware < v200r002b022 - Denial of Service via WHIP Service Buffer Length Manipulation

Title source: llm

Description

The Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a length field that is consistent with a buffer size, which allows remote attackers to cause a denial of service (device outage) or possibly have unspecified other impact via crafted traffic on TCP port 8701.

References (1)

Core 1

Core References

Exploit x_refsource_misc

https://debihiga.wordpress.com/sa-whip/

Scores

CVSS v3 9.8

EPSS 0.0032

EPSS Percentile 55.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-19

Status published

Products (1)

huawei/mt882_firmware < v200r002b022

Published Feb 15, 2016

Tracked Since Feb 18, 2026