CVE-2016-6178
Critical
Description
Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.
SeverityCritical
CVSS9.8
Exploit probability—
ProductHuawei Ne5000e Firmware
PublishedAug 2, 2016
First seenAug 2, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei ne5000e_firmware | v800r006c00 | — |
| huawei cloudengine_12800_firmware | v100r003c00, v100r003c10, v100r005c00, v100r005c10 | — |
| huawei ptn_6900-2-m8_firmware | v800r007c00 | — |
| huawei cx600_firmware | v600r008c20, v800r006c00, v800r006c20, v800r007c00 | — |
| huawei ne40e_firmware | v600r008c20, v800r006c00, v800r006c20, v800r006c30, v800r007c00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.