cbcvebase.
CVE-2016-8795
published 2017-04-02

CVE-2016-8795: Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software…

PriorityP432medium5.9CVSS 3.0
AVNACHPRNUINSUCNINAH
EPSS
1.19%
64.6th percentile
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.

Affected

25 ranges
VendorProductVersion rangeFixed in
huaweicloudengine_12800_firmware——
huaweicloudengine_12800_firmware——
huaweicloudengine_12800_firmware——
huaweicloudengine_12800_firmware——
huaweicloudengine_12800_firmware——
huaweicloudengine_12800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_5800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_6800_firmware——
huaweicloudengine_7800_firmware——
huaweicloudengine_7800_firmware——
huaweicloudengine_7800_firmware——
huaweicloudengine_7800_firmware——
huaweicloudengine_7800_firmware——
huaweicloudengine_8800_firmware——
huaweisecospace_usg6600_firmware——

CVSS provenance

nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.