Denial of service in Huawei products - CVE-2016-8277

Vulnerability identifier: #VU729

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2016-8277

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Huawei USG5500
Huawei USG5100
Huawei USG2200
Huawei USG2100

Software vendor:
Huawei

The vulnerability allows a remote authenticated user to cause denial of service on the target system.
The weakness exists due to insufficient input verification. Via an unspecified command parameter attackers can trigger the service deny.
Successful exploitation of the vulnerability results in denial of service on the vulnerable system.

Update to V300R001C10SPC600.

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en
• http://www.securityfocus.com/bid/93097