Skip to main content

Fusionaccess CVE-2016-6839

MEDIUM
HTTP Response Splitting (CWE-113)
2016-09-07 cve@mitre.org
Code Injection Huawei Fusionaccess
6.1
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 07, 2016 - 19:28 cve.org
MEDIUM 6.1

DescriptionCVE.org

CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

AnalysisAI

CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-113. CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Affected products include: Huawei Fusionaccess.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Fusionaccess

View all
CVE-2020-9090 HIGH
7.8 Oct 12

FusionAccess version 6.5.1 has an improper authorization vulnerability. Rated high severity (CVSS 7.8), this vulnerabili
CVE-2015-7844 HIGH
7.5 Apr 02

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protoc
CVE-2016-8779 MEDIUM
6.5 Apr 02

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to i
CVE-2020-1825 MEDIUM
6.5 Jun 15

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Rated medium severity

Same weakness CWE-113 – HTTP Response Splitting

View all
CVE-2024-52875 HIGH POC
8.8
CVE-2016-5699 MEDIUM POC
6.1
CVE-2016-8024 HIGH POC
8.1
CVE-2018-11347 HIGH POC
8.8
CVE-2018-3911 HIGH POC
8.6
CVE-2018-7830 HIGH POC
7.5
CVE-2022-41915 MEDIUM POC
6.5
CVE-2026-27810 MEDIUM POC
6.4

Same technique Code Injection

View all
CVE-2012-0158 HIGH POC
8.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2025-24893 CRITICAL POC
9.8
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8
CVE-2018-1273 CRITICAL POC
9.8

Share

CVE-2016-6839 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy