First published: Mon Oct 03 2016(Updated: )
Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei USG9520 firmware | =v300r001c01 | |
Huawei USG9560 firmware | =v300r001c01 | |
Huawei USG9580 firmware | =v300r001c01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8277 is classified as a high severity vulnerability due to its potential to cause denial of service by restarting the device.
To resolve CVE-2016-8277, upgrade the affected Huawei unified security gateways to the software version V300R001C01SPCa00 or later.
CVE-2016-8277 affects users of the Huawei USG9520, USG9560, and USG9580 unified security gateways running software before V300R001C01SPCa00.
CVE-2016-8277 can be exploited by remote authenticated users who send an unspecified command parameter to the device.
The impact of CVE-2016-8277 on network security is significant, as it allows attackers to potentially disrupt service by causing device restarts.