CVE-2016-8795
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00…
Impact
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Cloudengine 5800 Firmware | Versions v100r002c00, v100r003c00, v100r003c10, v100r005c00, v100r005c10, v100r006c00 |
| Huawei | Cloudengine 6800 Firmware | Versions v100r002c00, v100r003c00, v100r003c10, v100r005c00, v100r005c10, v100r006c00 |
| Huawei | Cloudengine 12800 Firmware | Versions v100r002c00, v100r003c00, v100r003c10, v100r005c00, v100r005c10, v100r006c00 |
| Huawei | Cloudengine 7800 Firmware | Versions v100r003c00, v100r003c10, v100r005c00, v100r005c10, v100r006c00 |
| Huawei | Cloudengine 8800 Firmware | Version v100r006c00 |
| Huawei | Secospace Usg6600 Firmware | Version v500r001c00 |