CVE-2016-6669

Name of the Vulnerable Software and Affected Versions Huawei USG2100, USG2200, USG5100, and USG5500 versions prior to V300R001C10SPC600

Description The issue is related to a buffer overflow in the Authentication, Authorization and Accounting (AAA) module. A remote attacker can send crafted Enterprise Application Platform (EAP) packets through a Remote Authentication Dial In User Service (RADIUS) server to execute arbitrary code on the affected devices.

Recommendations For versions prior to V300R001C10SPC600, update to V300R001C10SPC600 or later to resolve the issue. As a temporary workaround, consider restricting access to the AAA module to minimize the risk of exploitation.