CVE-2016-8796 Denial of service in USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01
Unauthenticated attackers can cause a denial of service on Huawei USG firewalls by sending abnormal DHCP request packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8796?
CVE-2016-8796 is a high-severity denial of service vulnerability in USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01, published on 2 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition.
Weakness: CWE-20
Which versions are affected by CVE-2016-8796?
It affects 3 products.
Products include Huawei Usg9520 Firmware, Huawei Usg9560 Firmware, Huawei Usg9580 Firmware.
How do I fix CVE-2016-8796?
No fix has been published for CVE-2016-8796 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-8796 being exploited?
There is no known exploitation of CVE-2016-8796 in the wild and no public exploit code.
Other vulnerabilities in USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01
Sources
Also known as GHSA-gcp4-p6rh-2cff.