Denial of service in Huawei products - CVE-2016-8277

Vulnerability identifier: #VU729

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-8277

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated user to cause denial of service on the target system.
The weakness exists due to insufficient input verification. Via an unspecified command parameter attackers can trigger the service deny.
Successful exploitation of the vulnerability results in denial of service on the vulnerable system.

Huawei USG5500
Huawei USG5100
Huawei USG2200
Huawei USG2100

Update to V300R001C10SPC600.

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en
• http://www.securityfocus.com/bid/93097

• Denial of service in Huawei USG5500