CVE-2016-5435: High severity huawei firmware vulnerability
Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5435?
CVE-2016-5435 is classified as a denial of service vulnerability.
How do I fix CVE-2016-5435?
To mitigate CVE-2016-5435, upgrade to the firmware version V500R001C20SPC100 or later.
Which devices are affected by CVE-2016-5435?
CVE-2016-5435 affects Huawei devices including the IPS Module, NGFW Module, and Secospace firewalls, among others.
What causes the CVE-2016-5435 vulnerability?
CVE-2016-5435 is caused by a memory leak in the hot standby networking configuration of the affected Huawei devices.
Can CVE-2016-5435 be exploited remotely?
Yes, CVE-2016-5435 can be exploited by remote attackers to cause a denial of service.