CVE-2016-8790 — MEDIUM (5.7)

Vulnerability Description

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could allow the attacker to exploit a buffer overflow vulnerability by sending crafted packets to the affected system to cause a main control board reboot.

CVSS Score

5.7

MEDIUM

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Cloudengine 5800 Firmware	v100r003c10
Huawei	Cloudengine 5800	-
Huawei	Cloudengine 6800 Firmware	v100r003c10
Huawei	Cloudengine 6800	-
Huawei	Cloudengine 7800 Firmware	v100r003c10
Huawei	Cloudengine 7800	-
Huawei	Cloudengine 8800 Firmware	v100r006c00
Huawei	Cloudengine 8800	-
Huawei	Cloudengine 12800 Firmware	v100r003c10
Huawei	Cloudengine 12800	-

Related Weaknesses (CWE)

CWE-119

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-cfm-enVendor Advisory
http://www.securityfocus.com/bid/94402Third Party AdvisoryVDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-cfm-enVendor Advisory
http://www.securityfocus.com/bid/94402Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-8790?

CVE-2016-8790 is a vulnerability with a CVSS score of 5.7 (MEDIUM). Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with ...

How severe is CVE-2016-8790?

CVE-2016-8790 has been rated MEDIUM with a CVSS base score of 5.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-8790?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 5800 Firmware, Huawei Cloudengine 5800, Huawei Cloudengine 6800 Firmware, Huawei Cloudengine 6800, Huawei Cloudengine 7800 Firmware.