Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20160824-01-IPV6
HistoryAug 24, 2016 - 12:00 a.m.

Security Advisory - IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability

2016-08-2400:00:00
Huawei Technologies
www.huawei.com
9

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.015 Low

EPSS

Percentile

87.2%

There is a vulnerability in the IP Version 6 (IPv6) Neighbor Discovery packet process of multiple products, successful exploit could allow an unauthenticated, remote attacker to cause an affected device to start dropping legitimate IPv6 neighbors as legitimate ND times out, leading to a denial of service (DoS). (Vulnerability ID: HWPSIRT-2016-06012)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-1409.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en

Affected configurations

Vulners
Node
huaweiar500MatchV200R005C00
OR
huaweiar500MatchV200R006C00
OR
huaweiar500MatchV200R006C10
OR
huaweiar500MatchV200R007C00
OR
huaweicloudengine_12800MatchV100R001C00
OR
huaweicloudengine_12800MatchV100R001C01
OR
huaweicloudengine_12800MatchV100R002C00
OR
huaweicloudengine_12800MatchV100R003C00
OR
huaweicloudengine_12800MatchV100R003C10
OR
huaweicloudengine_12800MatchV100R005C00
OR
huaweicloudengine_12800MatchV100R005C10
OR
huaweicloudengine_12800MatchV100R006C00
OR
huaweicloudengine_5800MatchV100R001C00
OR
huaweicloudengine_5800MatchV100R001C01
OR
huaweicloudengine_5800MatchV100R002C00
OR
huaweicloudengine_5800MatchV100R003C00
OR
huaweicloudengine_5800MatchV100R003C10
OR
huaweicloudengine_5800MatchV100R005C00
OR
huaweicloudengine_5800MatchV100R005C10
OR
huaweicloudengine_5800MatchV100R006C00
OR
huaweicloudengine_6800MatchV100R001C00
OR
huaweicloudengine_6800MatchV100R001C01
OR
huaweicloudengine_6800MatchV100R002C00
OR
huaweicloudengine_6800MatchV100R003C00
OR
huaweicloudengine_6800MatchV100R003C10
OR
huaweicloudengine_6800MatchV100R005C00
OR
huaweicloudengine_6800MatchV100R005C10
OR
huaweicloudengine_6800MatchV100R006C00
OR
huaweicloudengine_7800MatchV100R003C00
OR
huaweicloudengine_7800MatchV100R003C10
OR
huaweicloudengine_7800MatchV100R005C00
OR
huaweicloudengine_7800MatchV100R005C10
OR
huaweicloudengine_7800MatchV100R006C00
OR
huaweicloudengine_8800MatchV100R006C00
OR
huaweis12700MatchV200R005C00
OR
huaweis12700MatchV200R006C00
OR
huaweis12700MatchV200R007C00
OR
huaweis12700MatchV200R008C00
OR
huaweis12700MatchV200R009C00
OR
huaweis2300MatchV100R006C05
OR
huaweis2700MatchV100R006C05
OR
huaweis3300MatchV100R006C05
OR
huaweis3700MatchV100R006C05
OR
huaweis5300MatchV200R002C00
OR
huaweis5300MatchV200R005C00
OR
huaweis5300MatchV200R006C00
OR
huaweis5300MatchV200R007C00
OR
huaweis5300MatchV200R008C00
OR
huaweis5300MatchV200R009C00
OR
huaweis5700MatchV200R002C00
OR
huaweis5700MatchV200R003C00
OR
huaweis5700MatchV200R005C00
OR
huaweis5700MatchV200R006C00
OR
huaweis5700MatchV200R007C00
OR
huaweis5700MatchV200R008C00
OR
huaweis5700MatchV200R009C00
OR
huaweis6300MatchV200R002C00
OR
huaweis6300MatchV200R003C00
OR
huaweis6300MatchV200R005C00
OR
huaweis6300MatchV200R007C00
OR
huaweis6300MatchV200R008C00
OR
huaweis6300MatchV200R009C00
OR
huaweis6700MatchV200R002C00
OR
huaweis6700MatchV200R003C00
OR
huaweis6700MatchV200R005C00
OR
huaweis6700MatchV200R007C00
OR
huaweis6700MatchV200R008C00
OR
huaweis6700MatchV200R009C00
OR
huaweis7700MatchV200R002C00
OR
huaweis7700MatchV200R003C00
OR
huaweis7700MatchV200R005C00
OR
huaweis7700MatchV200R006C00
OR
huaweis7700MatchV200R007C00
OR
huaweis7700MatchV200R008C00
OR
huaweis7700MatchV200R009C00
OR
huaweis9300MatchV200R002C00
OR
huaweis9300MatchV200R003C00
OR
huaweis9300MatchV200R005C00
OR
huaweis9300MatchV200R006C00
OR
huaweis9300MatchV200R007C00
OR
huaweis9300MatchV200R008C00
OR
huaweis9300MatchV200R009C00
OR
huaweis9700MatchV200R002C00
OR
huaweis9700MatchV200R003C00
OR
huaweis9700MatchV200R005C00
OR
huaweis9700MatchV200R006C00
OR
huaweis9700MatchV200R007C00
OR
huaweis9700MatchV200R008C00
OR
huaweis9700MatchV200R009C00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.015 Low

EPSS

Percentile

87.2%