CVE-2016-4577

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-23 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Affected products

Huawei Ngfw Module Firmware: v500r001c00
Huawei Secospace Usg6300 Firmware: v500r001c00
Huawei Secospace Usg6500 Firmware: v500r001c00
Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c00
Huawei USG9500: v500r001c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en
http://www.securityfocus.com/bid/90532
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en
http://www.securityfocus.com/bid/90532

Get alerted when CVE-2016-4577 or the next vulnerability affects your stack