CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.

• CWE-200

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-enMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/92438Third Party Advisory, VDB Entry
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-enMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/92438Third Party Advisory, VDB Entry

Published

Sep 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6662Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x…
• CVE-2016-6663Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5…
• CVE-2016-6664mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.…7
• CVE-2016-6667NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.…
• CVE-2016-6668The Atlassian Hipchat Integration Plugin for Bitbucket Serve…7.5
• CVE-2016-6669Buffer overflow in the Authentication, Authorization and Acc…
• CVE-2016-6671The raw_decode function in libavcodec/rawdec.c in FFmpeg bef…
• CVE-2016-6672The Synaptics touchscreen driver in Android before 2016-10-0…
• CVE-2016-6673The NVIDIA camera driver in Android before 2016-10-05 on Nex…
• CVE-2016-6674system_server in Android before 2016-10-05 on Nexus devices …
• CVE-2016-6675Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Q…
• CVE-2016-6676Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualc…