7.8

CVE-2016-3678

Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ S5300 Firmware Version v200r003c00spc500
   Huawei ≫ S5300 Version -
   Huawei ≫ S5700 Version -
   Huawei ≫ S7700 Version -
   Huawei ≫ S9300 Version -
   Huawei ≫ S9700 Version -
Huawei ≫ S5700 Firmware Version v200r003c00spc500
   Huawei ≫ S5300 Version -
   Huawei ≫ S5700 Version -
   Huawei ≫ S7700 Version -
   Huawei ≫ S9300 Version -
   Huawei ≫ S9700 Version -
Huawei ≫ S7700 Firmware Version v200r003c00spc500
   Huawei ≫ S5300 Version -
   Huawei ≫ S5700 Version -
   Huawei ≫ S7700 Version -
   Huawei ≫ S9300 Version -
   Huawei ≫ S9700 Version -
Huawei ≫ S9300 Firmware Version v200r003c00spc500
   Huawei ≫ S5300 Version -
   Huawei ≫ S5700 Version -
   Huawei ≫ S7700 Version -
   Huawei ≫ S9300 Version -
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r003c00spc500
   Huawei ≫ S5300 Version -
   Huawei ≫ S5700 Version -
   Huawei ≫ S7700 Version -
   Huawei ≫ S9300 Version -
   Huawei ≫ S9700 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.32% 0.672
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-switch-en
Vendor Advisory