CVE-2016-4576

EPSS 2.38%
Veröffentlicht 23.05.2016 19:59:09
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 9 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Nip6300 Firmware Version v500r001c00

Huawei ≫ Nip6300 Version -

Huawei ≫ Secospace Usg6500 Firmware Version v500r001c00

Huawei ≫ Secospace Usg6500 Version -

Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c00

Huawei ≫ Secospace Antiddos8000 Version -

Huawei ≫ Usg9500 Firmware Version v500r001c00

Huawei ≫ Usg9500 Version -

Huawei ≫ Secospace Usg6300 Firmware Version v500r001c00

Huawei ≫ Secospace Usg6300 Version -

Huawei ≫ Ngfw Module Firmware Version v500r001c00

Huawei ≫ Ngfw Module Version -

Huawei ≫ Secospace Usg6600 Firmware Version v500r001c00

Huawei ≫ Secospace Usg6600 Version -

Huawei ≫ Nip6600 Firmware Version v500r001c00

Huawei ≫ Nip6600 Version -

Huawei ≫ Ips Module Firmware Version v500r001c00

Huawei ≫ Ips Module Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.38%	0.817

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en

Vendor Advisory

http://www.securityfocus.com/bid/90530

https://nvd.nist.gov/vuln/detail/CVE-2016-4576

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4576

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4576

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-4576