CVE-2016-8796

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 58.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei Usg9520 FirmwareHuawei Usg9560 FirmwareHuawei Usg9580 Firmware
Timeline
PublishedApr 2
Latest updateMay 17

Description

Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDhuawei/usg9520_firmwarev300r001c01
▶NVDhuawei/usg9560_firmwarev300r001c01
▶NVDhuawei/usg9580_firmwarev300r001c01

🔴Vulnerability Details

2
GHSA
GHSA-gcp4-p6rh-2cff: Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the↗2022-05-17
▶
CVEList
CVE-2016-8796: Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the↗2017-04-02
▶
CVE-2016-8796 (HIGH CVSS 7.5) | Huawei USG9520 V300R001C01 | cvebase.io