6.8

CVE-2016-8780

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Cloudengine 6800 Firmware Versionv100r006c00
   Huawei ≫ Cloudengine 6800 Version-
Huawei ≫ Cloudengine 7800 Firmware Versionv100r006c00
   Huawei ≫ Cloudengine 7800 Version-
Huawei ≫ Cloudengine 8800 Firmware Versionv100r006c00
   Huawei ≫ Cloudengine 8800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv100r006c00
   Huawei ≫ Cloudengine 12800 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.23% 0.431
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 6.8 8 6.9
AV:N/AC:L/Au:S/C:N/I:N/A:C
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://www.securityfocus.com/bid/94618
Third Party Advisory
VDB Entry