CVE-2016-4576

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-05-23

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Ips Module Firmware (Huawei)
• Ngfw Module Firmware (Huawei)
• Nip6300 Firmware (Huawei)
• Nip6600 Firmware (Huawei)
• Secospace Antiddos8000 Firmware (Huawei)
• Secospace Usg6300 Firmware (Huawei)
• Secospace Usg6500 Firmware (Huawei)
• Secospace Usg6600 Firmware (Huawei)
• Usg9500 Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en
• http://www.securityfocus.com/bid/90530