VulnerabilityModified

CVE-2016-8795

MEDIUM 5.9EPSS 1.19%

Does this matter?

Lower severity and a low EPSS score (1.19%). Track it; it rarely justifies an emergency change on its own.

Description

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.

CVSS 3.0: 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 1.19% probability · 66th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: huawei/cloudengine 5800 firmware · huawei/cloudengine 6800 firmware · huawei/cloudengine 12800 firmware · huawei/cloudengine 7800 firmware · huawei/cloudengine 8800 firmware · huawei/secospace usg6600 firmware
Source: psirt@huawei.com

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-vrp-enVendor Advisory
http://www.securityfocus.com/bid/94504Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-vrp-enVendor Advisory
http://www.securityfocus.com/bid/94504Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.