High severity7.3NVD Advisory· Published Jun 24, 2016· Updated Jun 17, 2026

CVE-2016-5722

Description

Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/Ocean Stor Firmware
cpe:2.3:a:huawei:ocean_stor_firmware:*:*:*:*:*:*:*:*
Range: <=v300r003c00spc100
Huawei/Oceanstor Uds Firmwarellm-create
Range: < V300R003C10
Huawei/Oceanstor 5800 V3 Firmwarellm-fuzzy
Range: < V300R003C10
Huawei/OceanStor 5600 V3llm-fuzzy
Range: < V300R003C10

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-oceanstor-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000