CVE-2016-8780

EPSS 0.23%
Veröffentlicht 02.04.2017 20:59:01
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@huawei.com
Teams Watchlist Login
Unerledigt Login

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Cloudengine 6800 Firmware Versionv100r006c00

Huawei ≫ Cloudengine 6800 Version-

Huawei ≫ Cloudengine 7800 Firmware Versionv100r006c00

Huawei ≫ Cloudengine 7800 Version-

Huawei ≫ Cloudengine 8800 Firmware Versionv100r006c00

Huawei ≫ Cloudengine 8800 Version-

Huawei ≫ Cloudengine 12800 Firmware Versionv100r006c00

Huawei ≫ Cloudengine 12800 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.431

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	6.8	8	6.9	AV:N/AC:L/Au:S/C:N/I:N/A:C

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-switch-en

Vendor Advisory

http://www.securityfocus.com/bid/94618

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-8780

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-8780

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-8780

EUVD