CVE-2016-2404

CVE-2016-2404 is a permission control vulnerability affecting various Huawei S5700, S6700, S7700, S9700, S12700 series switches and ACU2 devices running specific software versions. If Authentication, Authorization, and Accounting (AAA) is enabled with misconfigured user permissions, an authenticated user could gain unauthorized virtual type terminal (VTY) access, leading to privilege escalation. This vulnerability has a CVSSv3 score of 7.5 (HIGH), indicating a network-based attack with high impact on confidentiality, integrity, and availability, but requiring low privileges and high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.