What’s Vulnerable › Vulnerabilities

CVE-2016-4576

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-05-23 · updated 2026-06-17
• Weakness: CWE-119

Description

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Affected products

• Huawei Ips Module Firmware: v500r001c00
• Huawei Ngfw Module Firmware: v500r001c00
• Huawei Nip6300 Firmware: v500r001c00
• Huawei Nip6600 Firmware: v500r001c00
• Huawei Technologies Co., Ltd. Secospace AntiDDoS8000: v500r001c00
• Huawei Secospace Usg6300 Firmware: v500r001c00
• Huawei Secospace Usg6500 Firmware: v500r001c00
• Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c00
• Huawei USG9500: v500r001c00

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en
• http://www.securityfocus.com/bid/90530
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en
• http://www.securityfocus.com/bid/90530

Get alerted when CVE-2016-4576 or the next vulnerability affects your stack