CVE-2016-6838
Summary
| CVE | CVE-2016-6838 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-09-07 19:28:15 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, CH140 V3 and CH226 V3 servers with software before V100R001C00SPC122, CH220 V3 servers with software before V100R001C00SPC201, and CH121 V3 and CH222 V3 servers with software before V100R001C00SPC202 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSH encryption algorithm. |
Risk And Classification
Primary CVSS: v3.0 7.5 HIGH from [email protected]
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.009670000 probability, percentile 0.581140000 (date 2026-07-22)
Problem Types: CWE-200 | CWE-310 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 7.5 | HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | [email protected] | Primary | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:M/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Ch121 V3 Server | - | All | All | All |
| Operating System | Huawei | Ch121 V3 Server Firmware | v100r001c00 | All | All | All |
| Hardware | Huawei | Ch140 V3 Server | - | All | All | All |
| Operating System | Huawei | Ch140 V3 Server Firmware | v100r001c00 | All | All | All |
| Hardware | Huawei | Ch220 V3 Server | - | All | All | All |
| Operating System | Huawei | Ch220 V3 Server Firmware | v100r001c00 | All | All | All |
| Hardware | Huawei | Ch222 V3 Server | - | All | All | All |
| Operating System | Huawei | Ch222 V3 Server Firmware | v100r001c00 | All | All | All |
| Hardware | Huawei | Ch226 V3 Server | - | All | All | All |
| Operating System | Huawei | Ch226 V3 Server Firmware | v100r001c00 | All | All | All |
| Hardware | Huawei | Rh1288 V3 Server | - | All | All | All |
| Operating System | Huawei | Rh1288 V3 Server Firmware | v100r003c00 | All | All | All |
| Hardware | Huawei | Rh2288 V3 Server | - | All | All | All |
| Operating System | Huawei | Rh2288 V3 Server Firmware | v100r003c00 | All | All | All |
| Hardware | Huawei | X6800 V3 Server | - | All | All | All |
| Operating System | Huawei | X6800 V3 Server Firmware | v100r003c00 | All | All | All |
| Hardware | Huawei | Xh620 V3 Server | - | All | All | All |
| Operating System | Huawei | Xh620 V3 Server Firmware | v100r003c00 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| * | af854a3a-2127-422b-91ae-364da2661108 | www.huawei.com | Vendor Advisory |
| Multiple Huawei Products Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.