CVE-2016-8785: Input Validation
Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using VRP, causing the device to display additional memory data and possibly leading to sensitive information leakage.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-8785?
CVE-2016-8785 is a vulnerability found in Huawei S12700, S5700, S7700, and S9700 devices that allows an attacker to send a specially crafted packet to the device.
What is the severity of CVE-2016-8785?
CVE-2016-8785 has a severity rating of 4.3, which is considered medium.
How does CVE-2016-8785 affect Huawei S12700 devices?
CVE-2016-8785 affects Huawei S12700 devices with firmware versions V200R007C00 and V200R008C00.
How can I fix CVE-2016-8785?
To fix CVE-2016-8785, you should update the firmware of affected devices to a version that includes the necessary input validation.
Where can I find more information about CVE-2016-8785?
You can find more information about CVE-2016-8785 on the Huawei PSIRT security advisories page and the SecurityFocus website.