Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6669

Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.

Published

2016-09-22T15:59:05.977

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei usg2100_firmware ≤ v300r001c00 Yes
Operating System huawei usg2100_firmware ≤ v300r001c10 Yes
Operating System huawei usg2200_firmware ≤ v300r001c00 Yes
Operating System huawei usg2200_firmware ≤ v300r001c10 Yes
Operating System huawei usg5100_firmware ≤ v300r001c00 Yes
Operating System huawei usg5100_firmware ≤ v300r001c10 Yes
Operating System huawei usg5500_firmware ≤ v300r001c00 Yes
Operating System huawei usg5500_firmware ≤ v300r001c10 Yes
Hardware huawei usg2100 - No
Hardware huawei usg2200 - No
Hardware huawei usg5100 - No
Hardware huawei usg5500 - No
References