CVE-2016-8276: Buffer Overflow
Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8276?
CVE-2016-8276 is categorized as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2016-8276?
To mitigate CVE-2016-8276, you should upgrade to Huawei unified security gateway software version V300R001C10SPC600 or later.
What devices are impacted by CVE-2016-8276?
CVE-2016-8276 affects Huawei USG2100, USG2200, USG5100, and USG5500 devices running specific firmware versions.
What type of attack can exploit CVE-2016-8276?
CVE-2016-8276 can be exploited by remote attackers through a buffer overflow, leading to a denial of service.
What configurations are at risk for CVE-2016-8276?
The vulnerability is particularly problematic when CHAP authentication is configured on the server.