CVE-2016-5234

8.1 HIGH

Published: June 13, 2016 Modified: May 06, 2026

Description

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/90978

Source: cve@mitre.org

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/90978

Source: af854a3a-2127-422b-91ae-364da2661108

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

8.1 / 10.0

EPSS (Exploit Probability)

1.7%

82th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

huawei

Related CVEs

CVE-2026-8193 6.3

CVE-2026-8192 6.3

CVE-2026-8191 6.3

CVE-2026-8190 6.3

CVE-2026-8189 6.3