Vulnerability in Huawei Ar3200
CVE-2016-8797
Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software V200R008C00, V200R007C00; S7700 with software V200R008C00, V200R007C00, V200R006C00; S9300 with software V200R008C00, V200R007C00, V200R006C00; and S9700 with software V200R008C00, V200R007C00, V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.009 (58.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 59th percentile — 58.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Huawei Ar3200
- Huawei Ar3200 Firmware — versions v200r005c20, v200r005c32, v200r007c00
- Huawei S12700
- Huawei S12700 Firmware — versions v200r007c00, v200r008c00
- Huawei S5300
- Huawei S5300 Firmware — versions v200r006c00, v200r007c00, v200r008c00
- Huawei S5700
- Huawei S5700 Firmware — versions v200r006c00, v200r007c00, v200r008c00
- Huawei S6300
- Huawei S6300 Firmware — versions v200r007c00, v200r008c00
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2016-8797?
- CVE-2016-8797 is a high-severity vulnerability in Huawei Ar3200, classified under CWE-399. CVSS score: 7.5/10. Published 2017-04-02.
- How severe is CVE-2016-8797?
- High severity. CVSS v3 base score is 7.5 out of 10.