VulnerabilityModified

CVE-2016-8790

MEDIUM 5.7EPSS 0.48%

Does this matter?

Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.

Description

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could allow the attacker to exploit a buffer overflow vulnerability by sending crafted packets to the affected system to cause a main control board reboot.

CVSS 3.0: 5.7 MEDIUMCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.48% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: huawei/cloudengine 5800 firmware · huawei/cloudengine 6800 firmware · huawei/cloudengine 7800 firmware · huawei/cloudengine 8800 firmware · huawei/cloudengine 12800 firmware
Source: psirt@huawei.com

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-cfm-enVendor Advisory
http://www.securityfocus.com/bid/94402Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-cfm-enVendor Advisory
http://www.securityfocus.com/bid/94402Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.