CVEvulnerability

CVE-2016-8795

5.9 MEDIUM Published 2017-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-190

Description

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.

Affected configurations

• huawei cloudengine 5800 firmware v100r002c00 • huawei cloudengine 5800 firmware v100r003c00 • huawei cloudengine 5800 firmware v100r003c10 • huawei cloudengine 5800 firmware v100r005c00 • huawei cloudengine 5800 firmware v100r005c10 • huawei cloudengine 5800 firmware v100r006c00 • huawei cloudengine 6800 firmware v100r002c00 • huawei cloudengine 6800 firmware v100r003c00 • huawei cloudengine 6800 firmware v100r003c10 • huawei cloudengine 6800 firmware v100r005c00 • huawei cloudengine 6800 firmware v100r005c10 • huawei cloudengine 6800 firmware v100r006c00 • huawei cloudengine 12800 firmware v100r002c00 • huawei cloudengine 12800 firmware v100r003c00 • huawei cloudengine 12800 firmware v100r003c10 • huawei cloudengine 12800 firmware v100r005c00 • huawei cloudengine 12800 firmware v100r005c10 • huawei cloudengine 12800 firmware v100r006c00 • huawei cloudengine 7800 firmware v100r003c00 • huawei cloudengine 7800 firmware v100r003c10 • huawei cloudengine 7800 firmware v100r005c00 • huawei cloudengine 7800 firmware v100r005c10 • huawei cloudengine 7800 firmware v100r006c00 • huawei cloudengine 8800 firmware v100r006c00 • huawei secospace usg6600 firmware v500r001c00

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References