CVE-2016-8780 — MEDIUM (6.5)

Vulnerability Description

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Cloudengine 6800 Firmware	v100r006c00
Huawei	Cloudengine 6800	-
Huawei	Cloudengine 7800 Firmware	v100r006c00
Huawei	Cloudengine 7800	-
Huawei	Cloudengine 8800 Firmware	v100r006c00
Huawei	Cloudengine 8800	-
Huawei	Cloudengine 12800 Firmware	v100r006c00
Huawei	Cloudengine 12800	-

Related Weaknesses (CWE)

CWE-400

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-switch-Vendor Advisory
http://www.securityfocus.com/bid/94618Third Party AdvisoryVDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-switch-Vendor Advisory
http://www.securityfocus.com/bid/94618Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-8780?

CVE-2016-8780 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive file...

How severe is CVE-2016-8780?

CVE-2016-8780 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-8780?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 6800 Firmware, Huawei Cloudengine 6800, Huawei Cloudengine 7800 Firmware, Huawei Cloudengine 7800, Huawei Cloudengine 8800 Firmware.