CVE-2016-8781

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-02 · updated 2026-06-17
Weakness: CWE-399

Description

Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500 with software V500R001C20, Secospace USG6600 with software V500R001C20 and V500R001C20SPC200PWE allow remote attackers with specific permission to log in to a device and deliver a large number of unspecified commands to exhaust memory, causing a DoS condition.

Affected products

Huawei Secospace Usg6300 Firmware: v500r001c20, v500r001c20spc200pwe
Huawei Secospace Usg6500 Firmware: v500r001c20
Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c20, v500r001c20spc200pwe

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-firewall-en
http://www.securityfocus.com/bid/94927
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-firewall-en
http://www.securityfocus.com/bid/94927

Get alerted when CVE-2016-8781 or the next vulnerability affects your stack