Lucene search

[email protected]CVE-2016-8797

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2016-8797

2017-04-0220:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2016-8797

huawei

ar3200

s12700

s5300

s5700

s6300

s6700

s7700

s9300

s9700

software vulnerability

remote attack

memory exhaustion

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

61.5%

JSON

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software V200R008C00, V200R007C00; S7700 with software V200R008C00, V200R007C00, V200R006C00; S9300 with software V200R008C00, V200R007C00, V200R006C00; and S9700 with software V200R008C00, V200R007C00, V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.

CPENameOperatorVersion
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r005c20
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r005c32
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r007c00
huawei:s12700_firmwarehuawei s12700 firmwareeqv200r007c00
huawei:s12700_firmwarehuawei s12700 firmwareeqv200r008c00
huawei:s5300_firmwarehuawei s5300 firmwareeqv200r006c00
huawei:s5300_firmwarehuawei s5300 firmwareeqv200r007c00
huawei:s5300_firmwarehuawei s5300 firmwareeqv200r008c00
huawei:s5700_firmwarehuawei s5700 firmwareeqv200r006c00
huawei:s5700_firmwarehuawei s5700 firmwareeqv200r007c00

CPE	Name	Operator	Version
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r005c20
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r005c32
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r007c00
huawei:s12700_firmware	huawei s12700 firmware	eq	v200r007c00
huawei:s12700_firmware	huawei s12700 firmware	eq	v200r008c00
huawei:s5300_firmware	huawei s5300 firmware	eq	v200r006c00
huawei:s5300_firmware	huawei s5300 firmware	eq	v200r007c00
huawei:s5300_firmware	huawei s5300 firmware	eq	v200r008c00
huawei:s5700_firmware	huawei s5700 firmware	eq	v200r006c00
huawei:s5700_firmware	huawei s5700 firmware	eq	v200r007c00

Rows per page:

1-10 of 241

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

61.5%

JSON

Related for CVE-2016-8797

cvelist1 prion1 huawei1