CVE-2016-8798

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 65.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Usg5500 Firmware
Timeline
PublishedApr 2
Latest updateMay 17

Description

Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5usg5500_v300r001c00_and_v300r001c00USG5500 V300R001C00 and V300R001C00
▶NVDhuawei/usg5500_firmwarev300r001c00, v300r001c10+1

🔴Vulnerability Details

2
GHSA
GHSA-3x33-4vmh-52pp: Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service cond↗2022-05-17
▶
CVEList
CVE-2016-8798: Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service cond↗2017-04-02
▶
CVE-2016-8798 (HIGH CVSS 7.5) | Huawei USG5500 with software V300R0 | cvebase.io