What is the severity of CVE-2016-8276?

CVE-2016-8276 is categorized as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2016-8276?

To mitigate CVE-2016-8276, you should upgrade to Huawei unified security gateway software version V300R001C10SPC600 or later.

What devices are impacted by CVE-2016-8276?

CVE-2016-8276 affects Huawei USG2100, USG2200, USG5100, and USG5500 devices running specific firmware versions.

What type of attack can exploit CVE-2016-8276?

CVE-2016-8276 can be exploited by remote attackers through a buffer overflow, leading to a denial of service.

What configurations are at risk for CVE-2016-8276?

The vulnerability is particularly problematic when CHAP authentication is configured on the server.

Vulnerability/
CVE-2016-8276

critical

9.8

CWE

119

3/10/2016

6/8/2024

CVE-2016-8276: Buffer Overflow

First published: Mon Oct 03 2016(Updated: )

Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei E200E-USG2100	=v300r001c00
Huawei E200E-USG2100	=v300r001c10
Huawei USG2200 Firmware	=v300r001c00
Huawei USG2200 Firmware	=v300r001c10
Huawei USG5100 Firmware	=v300r001c00
Huawei USG5100 Firmware	=v300r001c10
Huawei USG5500 firmware	=v300r001c00
Huawei USG5500 firmware	=v300r001c10

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-8276?
CVE-2016-8276 is categorized as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2016-8276?
To mitigate CVE-2016-8276, you should upgrade to Huawei unified security gateway software version V300R001C10SPC600 or later.
What devices are impacted by CVE-2016-8276?
CVE-2016-8276 affects Huawei USG2100, USG2200, USG5100, and USG5500 devices running specific firmware versions.
What type of attack can exploit CVE-2016-8276?
CVE-2016-8276 can be exploited by remote attackers through a buffer overflow, leading to a denial of service.
What configurations are at risk for CVE-2016-8276?
The vulnerability is particularly problematic when CHAP authentication is configured on the server.

agent/references
agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/weakness
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/huawei
canonical/huawei e200e-usg2100
version/huawei e200e-usg2100/v300r001c00
version/huawei e200e-usg2100/v300r001c10
canonical/huawei usg2200 firmware
version/huawei usg2200 firmware/v300r001c00
version/huawei usg2200 firmware/v300r001c10
canonical/huawei usg5100 firmware
version/huawei usg5100 firmware/v300r001c00
version/huawei usg5100 firmware/v300r001c10
canonical/huawei usg5500 firmware
version/huawei usg5500 firmware/v300r001c00
version/huawei usg5500 firmware/v300r001c10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2016-8276?
CVE-2016-8276 is categorized as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2016-8276?
To mitigate CVE-2016-8276, you should upgrade to Huawei unified security gateway software version V300R001C10SPC600 or later.
What devices are impacted by CVE-2016-8276?
CVE-2016-8276 affects Huawei USG2100, USG2200, USG5100, and USG5500 devices running specific firmware versions.
What type of attack can exploit CVE-2016-8276?
CVE-2016-8276 can be exploited by remote attackers through a buffer overflow, leading to a denial of service.
What configurations are at risk for CVE-2016-8276?
The vulnerability is particularly problematic when CHAP authentication is configured on the server.