What is CVE-2016-5435?

CVE-2016-5435 is a medium-severity vulnerability in Huawei Firmware, classified under CWE-399. CVSS score: 5.9/10. Published 2016-06-24.

How severe is CVE-2016-5435?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Huawei Firmware

CVE-2016-5435

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei Huawei_firmware — versions v5500r001c00
Huawei Ips_module
Huawei Ngfw_module
Huawei Nip6300
Huawei Nip6600
Huawei Secospace_antiddos8000
Huawei Secospace_usg6300
Huawei Secospace_usg6500
Huawei Secospace_usg6600
Huawei Usg9500

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-5435?: CVE-2016-5435 is a medium-severity vulnerability in Huawei Firmware, classified under CWE-399. CVSS score: 5.9/10. Published 2016-06-24.
How severe is CVE-2016-5435?: Medium severity. CVSS v3 base score is 5.9 out of 10.