cbcvebase.
CVE-2016-8797
published 2017-04-02

CVE-2016-8797: Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00…

PriorityP339high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
0.87%
55.0th percentile
Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software V200R008C00, V200R007C00; S7700 with software V200R008C00, V200R007C00, V200R006C00; S9300 with software V200R008C00, V200R007C00, V200R006C00; and S9700 with software V200R008C00, V200R007C00, V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.

Affected

24 ranges
VendorProductVersion rangeFixed in
huaweiar3200_firmware——
huaweiar3200_firmware——
huaweiar3200_firmware——
huaweis12700_firmware——
huaweis12700_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5700_firmware——
huaweis5700_firmware——
huaweis5700_firmware——
huaweis6300_firmware——
huaweis6300_firmware——
huaweis6700_firmware——
huaweis6700_firmware——
huaweis7700_firmware——
huaweis7700_firmware——
huaweis7700_firmware——
huaweis9300_firmware——
huaweis9300_firmware——
huaweis9300_firmware——
huaweis9700_firmware——
huaweis9700_firmware——
huaweis9700_firmware——

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.