What is CVE-2016-8786?

CVE-2016-8786 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-03-09.

How severe is CVE-2016-8786?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Huawei S12700

CVE-2016-8786

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00 have a denial of service (DoS) vulnerability. Due to the lack of input validation, a remote attacker may craft a malformed Resource Reservation Protocol (RSVP) packet and send it to the device, causing a few buffer overflows and occasional device restart.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2018-03-09 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.017 (77.5th percentile), scored 2026-10-23.

Low probability of exploitation in the next 30 days, but still tracked. 77th percentile — 77.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000

Affected products

Huawei S12700
Huawei S12700 Firmware — versions v200r005c00, v200r006c00, v200r007c00
Huawei S5700
Huawei S5700 Firmware — versions v200r006c00, v200r007c00, v200r008c00
Huawei S6700
Huawei S6700 Firmware — versions v200r008c00
Huawei S7700
Huawei S7700 Firmware — versions v200r001c00, v200r002c00, v200r003c00
Huawei S9700
Huawei S9700 Firmware — versions v200r001c00, v200r002c00, v200r003c00

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

www.securityfocus.com/bid/95139 (VDB Entry, Third Party Advisory, vdb-entry)
www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-01-rsvp-en (Vendor Advisory)

Frequently asked questions

What is CVE-2016-8786?: CVE-2016-8786 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-03-09.
How severe is CVE-2016-8786?: High severity. CVSS v3 base score is 7.5 out of 10.