Security Advisory - Privilege Escalation Vulnerability in Huawei Policy Center

Huawei Policy Center dynamically allocates network resources in a unified manner, enabling the network to provide services with more agility.

Huawei Policy Center has a privilege escalation vulnerability. An attacker could log in to the device as a low-privilege user, craft a URL that contains commands with admin permissions. The attacker can obtain the admin permissions to crash the system. (Vulnerability ID: HWPSIRT-2015-12011)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-2405.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160217-01-policycenter-en&gt;