CVE-2016-6179: huawei honor_6_firmware Improper Access Control
Vulnerability summary
CVE-2016-6179 is a high (CVSS 7.0) Improper Access Control vulnerability in huawei honor_6_firmware. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.3% of scored vulnerabilities.
Timeline
- 07-09-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60-L11 before H60-L11C00B850, H60-L21 before H60-L21C00B850, H60-L02 before H60-L02C00B850, H60-L12 before H60-L12C00B850, and H60-L03 before H60-L03C01B850 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei1 product
- honor_6_firmware≥ h60-l01, ≤ h60-l01c00b850 | ≥ h60-l02, ≤ h60-l02c00b850 | ≥ h60-l03, ≤ h60-l03c01b850 | ≥ h60-l11, ≤ h60-l11c00b850 | ≥ h60-l12, ≤ h60-l12c00b850 | ≥ h60-l21, ≤ h60-l21c00b850
1 vendor · 1 product
References
2 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-smartphone-enX Refsource CONFIRMVendor Advisory