Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-8276

Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.

Published

2016-10-03T21:59:09.457

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application huawei usg2100 v300r001c00 Yes
Application huawei usg2100 v300r001c10 Yes
Application huawei usg2200 v300r001c00 Yes
Application huawei usg2200 v300r001c10 Yes
Application huawei usg5100 v300r001c00 Yes
Application huawei usg5100 v300r001c10 Yes
Application huawei usg5500 v300r001c00 Yes
Application huawei usg5500 v300r001c10 Yes
References