CVE-2016-5435

EPSS 0.15%
Published 24.06.2016 17:59:02
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Huawei Firmware Versionv5500r001c00

   Huawei ≫ Ips Module Version-
   Huawei ≫ Ngfw Module Version-
   Huawei ≫ Nip6300 Version-
   Huawei ≫ Nip6600 Version-
   Huawei ≫ Secospace Antiddos8000 Version-
   Huawei ≫ Secospace Usg6300 Version-
   Huawei ≫ Secospace Usg6500 Version-
   Huawei ≫ Secospace Usg6600 Version-
   Huawei ≫ Usg9500 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.15%	0.317

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-5435

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-5435

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-5435

EUVD