CVE-2016-4576 Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS800...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei nip6300 firmware | = v500r001c00 | No fix listed |
| Huawei secospace usg6500 firmware | = v500r001c00 | No fix listed |
| Huawei secospace antiddos8000 firmware | = v500r001c00 | No fix listed |
| Huawei usg9500 firmware | = v500r001c00 | No fix listed |
| Huawei secospace usg6300 firmware | = v500r001c00 | No fix listed |
| Huawei ngfw module firmware | = v500r001c00 | No fix listed |
| Huawei secospace usg6600 firmware | = v500r001c00 | No fix listed |
| Huawei nip6600 firmware | = v500r001c00 | No fix listed |
| Huawei ips module firmware | = v500r001c00 | No fix listed |
References
- www.huawei.com vendor-advisory
- 90530 vdb-entry