Security Advisory - Input Validation Vulnerability in Some Huawei Products

Some Huawei products have an input validation vulnerability due to improper validation of Multiprotocol Label Switching (MPLS) packets. A remote unauthenticated attacker could exploit this vulnerability by sending malformed MPLS packets. Successful exploit could lead to a denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2016-08023)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-8773.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161111-01-mpls-en