CVE-2016-8802
The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6500 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6600 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200 allows authenticated attackers to setup a specific security policy into the devices, causing a buffer overflow and crashing the system.
Published:Apr 2, 2017
Last Modified:Apr 20, 2025
EPS:Apr 2, 2017
EPSS Score:0.00208
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Huawei
Product
Secospace Usg6300
Huawei
Secospace Usg6300
Vendor
Huawei
Product
Secospace Usg6300 Firmware
Huawei
Secospace Usg6300 Firmware
Vendor
Huawei
Product
Secospace Usg6500
Huawei
Secospace Usg6500
Vendor
Huawei
Product
Secospace Usg6500 Firmware
Huawei
Secospace Usg6500 Firmware
Vendor
Huawei
Product
Secospace Usg6600
Huawei
Secospace Usg6600
Vendor
Huawei
Product
Secospace Usg6600 Firmware
Huawei
Secospace Usg6600 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
