CVE-2016-8798 Security feature bypass in USG5500 V300R001C00 and V300R001C00
Attackers can bypass the anti-DDoS module on Huawei USG5500 firewalls to cause denial of service on backend servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8798?
CVE-2016-8798 is a high-severity vulnerability in USG5500 V300R001C00 and V300R001C00, published on 2 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.
Weakness: CWE-284
Which versions are affected by CVE-2016-8798?
It affects 1 product.
Products include Huawei Usg5500 Firmware.
How do I fix CVE-2016-8798?
No fix has been published for CVE-2016-8798 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8798 being exploited?
There is no known exploitation of CVE-2016-8798 in the wild and no public exploit code.
Sources
Also known as GHSA-3x33-4vmh-52pp.