Lucene search

K
cve[email protected]CVE-2016-5435
HistoryJun 24, 2016 - 5:59 p.m.

CVE-2016-5435

2016-06-2417:59:02
CWE-399
web.nvd.nist.gov
22
cve-2016-5435
huawei ips module
ngfw module
nip6300
nip6600
secospace usg6300
usg6500
usg6600
usg9500
antiddos8000
v500r001c00
v500r001c20spc100
memory leak
denial of service
hot standby networking
remote attack
nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.

Affected configurations

NVD
Node
huaweihuawei_firmwareMatchv5500r001c00
AND
huaweiips_moduleMatch-
OR
huaweingfw_moduleMatch-
OR
huaweinip6300Match-
OR
huaweinip6600Match-
OR
huaweisecospace_antiddos8000Match-
OR
huaweisecospace_usg6300Match-
OR
huaweisecospace_usg6500Match-
OR
huaweisecospace_usg6600Match-
OR
huaweiusg9500Match-

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

Related for CVE-2016-5435