9.8

CVE-2016-4576

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Nip6300 Firmware Versionv500r001c00
   Huawei ≫ Nip6300 Version-
Huawei ≫ Secospace Usg6500 Firmware Versionv500r001c00
   Huawei ≫ Secospace Usg6500 Version-
Huawei ≫ Secospace Antiddos8000 Firmware Versionv500r001c00
   Huawei ≫ Secospace Antiddos8000 Version-
Huawei ≫ Usg9500 Firmware Versionv500r001c00
   Huawei ≫ Usg9500 Version-
Huawei ≫ Secospace Usg6300 Firmware Versionv500r001c00
   Huawei ≫ Secospace Usg6300 Version-
Huawei ≫ Ngfw Module Firmware Versionv500r001c00
   Huawei ≫ Ngfw Module Version-
Huawei ≫ Secospace Usg6600 Firmware Versionv500r001c00
   Huawei ≫ Secospace Usg6600 Version-
Huawei ≫ Nip6600 Firmware Versionv500r001c00
   Huawei ≫ Nip6600 Version-
Huawei ≫ Ips Module Firmware Versionv500r001c00
   Huawei ≫ Ips Module Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.35% 0.834
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.