Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en | Vendor Advisory |
http://www.securityfocus.com/bid/91772 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Information
Published : 2016-08-02 09:59
Updated : 2016-08-03 10:30
NVD link : CVE-2016-6178
Mitre link : CVE-2016-6178
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
huawei
- ne40e
- cloudengine_12800_firmware
- ne5000e_firmware
- cx600_firmware
- cloudengine_12800
- ptn_6900-2-m8
- cx600
- ne5000e
- ne40e_firmware
- ptn_6900-2-m8_firmware