Vulnerability in Huawei Secospace Usg6300
CVE-2016-8781
Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500 with software V500R001C20, Secospace USG6600 with software V500R001C20 and V500R001C20SPC200PWE allow remote attackers with specific permission to log in to a device and deliver a large number of unspecified commands to exhaust memory, causing a DoS condition.
EPSS: 0.013 (66.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Secospace_usg6300
- Huawei Secospace_usg6300_firmware — versions v500r001c20, v500r001c20spc200pwe
- Huawei Secospace_usg6500
- Huawei Secospace_usg6500_firmware — versions v500r001c20
- Huawei Secospace_usg6600
- Huawei Secospace_usg6600_firmware — versions v500r001c20, v500r001c20spc200pwe
- N/a Secospace Usg6300, Usg6500, Usg6600 Usg6300 V500r001c20 And V500r001c20spc200pwe,secospace Usg6500 V500r001c20,secospace V500r001c20spc200pwe — versions Secospace USG6300, Secospace USG6500, Secospace USG6600 Secospace USG6300 V500R001C20 and V500R001C20SPC200PWE,Secospace USG6500 V500R001C20,Secospace USG6600 V500R001C20 and V500R001C20SPC200PWE
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@huawei.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2016-8781?
- CVE-2016-8781 is a medium-severity vulnerability in Huawei Secospace Usg6300, classified under CWE-399. CVSS score: 6.5/10. Published 2017-04-02.
- How severe is CVE-2016-8781?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2016-8781 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.