CVE-2016-6669: Buffer Overflow
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6669?
CVE-2016-6669 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2016-6669?
To mitigate CVE-2016-6669, you should upgrade to Huawei USG2100, USG2200, USG5100, or USG5500 firmware versions following V300R001C10SPC600.
Which devices are affected by CVE-2016-6669?
CVE-2016-6669 affects Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways running vulnerable firmware.
What type of attack does CVE-2016-6669 enable?
CVE-2016-6669 enables remote authenticated RADIUS servers to execute arbitrary code through crafted EAP packets.
Is there a workaround for CVE-2016-6669?
There are no documented workarounds for CVE-2016-6669; upgrading firmware is the recommended solution.