CVE-2016-4087

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-23 · updated 2026-06-17
Weakness: CWE-20

Description

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets.

Affected products

Huawei S12700 Firmware: v200r005c00spc300
Huawei S5700 Firmware: v200r001c00, v200r002c00spc100, v200r003c00spc300, v200r005c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160427-01-dns-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160427-01-dns-en

Get alerted when CVE-2016-4087 or the next vulnerability affects your stack