CVE-2016-8797

Published: Apr 2, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software V200R008C00, V200R007C00; S7700 with software V200R008C00, V200R007C00, V200R006C00; S9300 with software V200R008C00, V200R007C00, V200R006C00; and S9700 with software V200R008C00, V200R007C00, V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.

Affected (24)

Products: Huawei: Ar3200 Firmware, S12700 Firmware, S5300 Firmware, S5700 Firmware, S6300 Firmware, S6700 Firmware, S7700 Firmware, S9300 Firmware, S9700 Firmware

9 products

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar3200 Firmware	Version v200r005c20
Huawei Ar3200 Firmware	Version v200r005c32
Huawei Ar3200 Firmware	Version v200r007c00

Running on/with	Platform Versions
Huawei Ar3200	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S12700 Firmware	Version v200r007c00
Huawei S12700 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S12700	All versions

Configuration C

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5300 Firmware	Version v200r006c00
Huawei S5300 Firmware	Version v200r007c00
Huawei S5300 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S5300	All versions

Configuration D

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700 Firmware	Version v200r006c00
Huawei S5700 Firmware	Version v200r007c00
Huawei S5700 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S5700	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S6300 Firmware	Version v200r007c00
Huawei S6300 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S6300	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S6700 Firmware	Version v200r007c00
Huawei S6700 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S6700	All versions

Configuration G

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S7700 Firmware	Version v200r006c00
Huawei S7700 Firmware	Version v200r007c00
Huawei S7700 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S7700	All versions

Configuration H

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S9300 Firmware	Version v200r006c00
Huawei S9300 Firmware	Version v200r007c00
Huawei S9300 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S9300	All versions

Configuration I

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S9700 Firmware	Version v200r006c00
Huawei S9700 Firmware	Version v200r007c00
Huawei S9700 Firmware	Version v200r008c00

Running on/with	Platform Versions
Huawei S9700	All versions

Related CWEs

CWE-399

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.