What is CVE-2016-8797?

CVE-2016-8797 is a high-severity vulnerability in Huawei Ar3200, classified under CWE-399. CVSS score: 7.5/10. Published 2017-04-02.

How severe is CVE-2016-8797?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Huawei Ar3200

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software V200R008C00, V200R007C00; S7700 with software V200R008C00, V200R007C00, V200R006C00; S9300 with software V200R008C00, V200R007C00, V200R006C00; and S9700 with software V200R008C00, V200R007C00, V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.

EPSS: 0.009 (56.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei Ar3200
Huawei Ar3200_firmware — versions v200r005c20, v200r005c32, v200r007c00
Huawei S12700
Huawei S12700_firmware — versions v200r007c00, v200r008c00
Huawei S5300
Huawei S5300_firmware — versions v200r006c00, v200r007c00, v200r008c00
Huawei S5700
Huawei S5700_firmware — versions v200r006c00, v200r007c00, v200r008c00
Huawei S6300
Huawei S6300_firmware — versions v200r007c00, v200r008c00

Weakness classification (CWE)

CWE-399

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-8797?: CVE-2016-8797 is a high-severity vulnerability in Huawei Ar3200, classified under CWE-399. CVSS score: 7.5/10. Published 2017-04-02.
How severe is CVE-2016-8797?: High severity. CVSS v3 base score is 7.5 out of 10.