vulnwire
5.7med

CVE-2016-8790

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 w…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.7
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 42%
Public exploits
0
none known

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could allow the attacker to exploit a buffer overflow vulnerability by sending crafted packets to the affected system to cause a main control board reboot.

Exploit prediction (EPSS)

0.48% probability of exploitation in the next 30 days, higher than 42% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.7CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD2.05.5AV:A/AC:L/Au:S/C:N/I:N/A:C

Affected products

  • n/a CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,CloudEngine 8800,CloudEngine 12800 V100R003C10,V100R005C00,V100R005C10,V100R006C00

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • huawei.com /en/psirt/security-advisories/huawei-sa-20161116-01-cfm-en · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/94402 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.