CVE-2016-4577

HIGH · 7.5 CVSS Gepubliceerd: 23-05-2016 CWE-119

Beschrijving

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Vendors

Huawei

Affected products

Usg9500 Usg9500 Firmware Ngfw Module Ngfw Module Firmware Secospace Usg6300 Secospace Usg6300 Firmware Secospace Usg6600 Secospace Usg6600 Firmware Secospace Usg6500 Secospace Usg6500 Firmware

References

www.huawei.com
www.securityfocus.com