CVE-2016-8802

Опубликовано: 02 апр. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6500 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6600 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200 allows authenticated attackers to setup a specific security policy into the devices, causing a buffer overflow and crashing the system.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161125-01-usg-en
Vendor Advisory
http://www.securityfocus.com/bid/94538
Third Party Advisory
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161125-01-usg-en
Vendor Advisory
http://www.securityfocus.com/bid/94538
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*

cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*

cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*

cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*

cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00208

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-x3cf-qq49-8942

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 43%

0.00208

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119