CVE-2016-4576

CRITICAL · 9.8 CVSS Gepubliceerd: 23-05-2016 CWE-119

Beschrijving

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Vendors

Huawei

Affected products

Nip6300 Nip6300 Firmware Secospace Usg6500 Secospace Usg6500 Firmware Secospace Antiddos8000 Secospace Antiddos8000 Firmware Usg9500 Usg9500 Firmware Secospace Usg6300 Secospace Usg6300 Firmware Ngfw Module Ngfw Module Firmware Secospace Usg6600 Secospace Usg6600 Firmware Nip6600 Nip6600 Firmware Ips Module Ips Module Firmware

References

www.huawei.com
www.securityfocus.com