What is CVE-2016-8773?

CVE-2016-8773 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2017-04-02.

How severe is CVE-2016-8773?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Huawei S12700

CVE-2016-8773

Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with software V200R003C00, V200R005C00, V200R008C00, V200R009C00; S6700 with software V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R008C00, V200R009C00; S7700 with software V200R007C00, V200R008C00, V200R009C00; S9300 with software V200R007C00, V200R008C00, V200R009C00; S9700 with software V200R007C00, V200R008C00, V200R009C00; and S12700 with software V200R007C00, V200R007C01, V200R008C00, V200R009C00 allow the attacker to cause a denial of service condition by sending malformed MPLS packets.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2017-04-02 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.009 (59.9th percentile), scored 2026-10-23.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 60th percentile — 59.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000

Affected products

Huawei S12700
Huawei S12700 Firmware — versions v200r007c00, v200r007c01, v200r008c00
Huawei S5300
Huawei S5300 Firmware — versions v200r003c00, v200r007c00, v200r008c00
Huawei S5700
Huawei S5700 Firmware — versions v200r001c00, v200r002c00, v200r003c00
Huawei S6300
Huawei S6300 Firmware — versions v200r003c00, v200r005c00, v200r008c00
Huawei S6700
Huawei S6700 Firmware — versions v200r001c00, v200r001c01, v200r002c00

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161111-01-mpls-en (Vendor Advisory)
www.securityfocus.com/bid/94285 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2016-8773?: CVE-2016-8773 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2017-04-02.
How severe is CVE-2016-8773?: High severity. CVSS v3 base score is 7.5 out of 10.