CVE-2016-5435

EPSS 0.15%
Veröffentlicht 24.06.2016 17:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Huawei Firmware Versionv5500r001c00

   Huawei ≫ Ips Module Version-
   Huawei ≫ Ngfw Module Version-
   Huawei ≫ Nip6300 Version-
   Huawei ≫ Nip6600 Version-
   Huawei ≫ Secospace Antiddos8000 Version-
   Huawei ≫ Secospace Usg6300 Version-
   Huawei ≫ Secospace Usg6500 Version-
   Huawei ≫ Secospace Usg6600 Version-
   Huawei ≫ Usg9500 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.317

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-5435

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-5435

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-5435

EUVD