CVE-2016-4577

published 2016-05-23

CVE-2016-4577: Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before…

Priority P3 37 high 7.5 CVSS 3.0

AV A AC H PR N UI N S U C H I H A H

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Affected

5 ranges

Vendor	Product	Version range	Fixed in
huawei	ngfw_module_firmware	—	—
huawei	secospace_usg6300_firmware	—	—
huawei	secospace_usg6500_firmware	—	—
huawei	secospace_usg6600_firmware	—	—
huawei	usg9500_firmware	—	—

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.8 MEDIUM AV:A/AC:H/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119