CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.

• CWE-20

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-enVendor Advisory
• http://www.securityfocus.com/bid/92618Third Party Advisory, VDB Entry
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-enVendor Advisory
• http://www.securityfocus.com/bid/92618Third Party Advisory, VDB Entry

Published

Sep 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6895Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-6896Directory traversal vulnerability in the wp_ajax_update_plug…
• CVE-2016-6897Cross-site request forgery (CSRF) vulnerability in the wp_aj…
• CVE-2016-6898XML external entity (XXE) vulnerability in the Hyper Managem…
• CVE-2016-6899The Intelligent Baseboard Management Controller (iBMC) in Hu…
• CVE-2016-6900The Intelligent Baseboard Management Controller (iBMC) in Hu…
• CVE-2016-6902lshell 0.9.16 allows remote authenticated users to break out…
• CVE-2016-6903lshell 0.9.16 allows remote authenticated users to break out…
• CVE-2016-6904Versions of VASA Provider for Clustered Data ONTAP prior to …
• CVE-2016-6905The read_image_tga function in gd_tga.c in the GD Graphics L…
• CVE-2016-6906The read_image_tga function in gd_tga.c in the GD Graphics L…
• CVE-2016-6908Characters from languages are such as Arabic, Hebrew are dis…