Huawei Usg5500 Firmware vulnerabilities

4 known vulnerabilities affecting huawei/usg5500_firmware.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH4

Vulnerabilities

Page 1 of 1

CVE-2016-8798HIGHCVSS 7.5vv300r001c00vv300r001c102017-04-02

CVE-2016-8798 [HIGH] CWE-284 CVE-2016-8798: Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS mo Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.

CVE-2014-9136HIGHCVSS 8.8≤ v300r001c00spc9002017-04-02

CVE-2014-9136 [HIGH] CWE-352 CVE-2014-9136: Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remot Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

CVE-2014-9137HIGHCVSS 8.8≤ v300r001c00spc9002017-04-02

CVE-2014-9137 [HIGH] CWE-352 CVE-2014-9137: Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with softw Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

CVE-2016-6669HIGHCVSS 7.5≤ v300r001c00≤ v300r001c102016-09-22

CVE-2016-6669 [HIGH] CWE-119 CVE-2016-6669: Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.