PT-2016-6970

CVE-2016-6518

·

Published

2016-09-14

·

Updated

2016-09-28

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Huawei S9300 versions (affected versions not specified) Huawei S5300 versions (affected versions not specified) Huawei S5700 versions (affected versions not specified) Huawei S6700 versions (affected versions not specified) Huawei S7700 versions (affected versions not specified) Huawei S9700 versions (affected versions not specified) Huawei S12700 versions (affected versions not specified)
Description The issue is caused by a memory leak that allows remote attackers to cause a denial of service, resulting in memory consumption and potential device restart. This is achieved by sending a large number of malformed packets to the target device, exploiting the lack of adequate input validation.
Recommendations For Huawei S9300, update to a version that includes input validation to prevent memory exhaustion. For Huawei S5300, restrict access to prevent the sending of malformed packets until a patch is available. For Huawei S5700, consider implementing packet filtering to minimize the risk of exploitation. For Huawei S6700, avoid using the device for critical operations until the issue is resolved. For Huawei S7700, apply configuration changes to limit the device's exposure to malformed packets. For Huawei S9700, disable unnecessary features to reduce the attack surface. For Huawei S12700, as a temporary workaround, consider restricting device access to trusted sources only.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾