First published: Sun Apr 02 2017(Updated: )
Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei CloudEngine 6800 firmware | =v100r006c00 | |
Huawei CloudEngine 6800 | ||
Huawei CloudEngine 7800 | =v100r006c00 | |
Huawei CloudEngine 7800 firmware | ||
Huawei CloudEngine 8800 | =v100r006c00 | |
Huawei CloudEngine 8800 | ||
Huawei CloudEngine 12800 Firmware | =v100r006c00 | |
Huawei CloudEngine 12800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8780 is rated as a high severity vulnerability because it allows remote attackers to exhaust storage resources, potentially leading to a denial of service.
To mitigate CVE-2016-8780, it is recommended to upgrade to a newer firmware version that addresses this vulnerability.
CVE-2016-8780 affects the Huawei CloudEngine 6800, 7800, 8800, and 12800 models running firmware version V100R006C00.
CVE-2016-8780 facilitates a denial of service (DoS) attack by allowing attackers to fill shared storage space.
Yes, CVE-2016-8780 can be exploited remotely by attackers who have specific permissions to store files.