SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2016-4576

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100…

CRITICAL 9.8EPSS 2.38%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

CVSS 3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.38% probability · 83th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
huawei/nip6300 firmware · huawei/secospace usg6500 firmware · huawei/secospace antiddos8000 firmware · huawei/usg9500 firmware · huawei/secospace usg6300 firmware · huawei/ngfw module firmware · huawei/secospace usg6600 firmware · huawei/nip6600 firmware · huawei/ips module firmware
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.