NetSight
high7.5

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V5…

Impact

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Affected products

VendorProductAffected versions
HuaweiUsg9500 Firmware
Version v500r001c00
HuaweiNgfw Module Firmware
Version v500r001c00
HuaweiSecospace Usg6300 Firmware
Version v500r001c00
HuaweiSecospace Usg6600 Firmware
Version v500r001c00
HuaweiSecospace Usg6500 Firmware
Version v500r001c00

Weakness classification

References