First published: Sun Apr 02 2017(Updated: )
Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could allow the attacker to exploit a buffer overflow vulnerability by sending crafted packets to the affected system to cause a main control board reboot.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei CloudEngine 5800 firmware | =v100r003c10 | |
Huawei CloudEngine 5800 firmware | =v100r005c00 | |
Huawei CloudEngine 5800 firmware | =v100r005c10 | |
Huawei CloudEngine 5800 firmware | =v100r006c00 | |
Huawei CloudEngine 5800 firmware | ||
Huawei CloudEngine 6800 firmware | =v100r003c10 | |
Huawei CloudEngine 6800 firmware | =v100r005c00 | |
Huawei CloudEngine 6800 firmware | =v100r005c10 | |
Huawei CloudEngine 6800 firmware | =v100r006c00 | |
Huawei CloudEngine 6800 | ||
Huawei CloudEngine 7800 | =v100r003c10 | |
Huawei CloudEngine 7800 | =v100r005c00 | |
Huawei CloudEngine 7800 | =v100r005c10 | |
Huawei CloudEngine 7800 | =v100r006c00 | |
Huawei CloudEngine 7800 firmware | ||
Huawei CloudEngine 8800 | =v100r006c00 | |
Huawei CloudEngine 8800 | ||
Huawei CloudEngine 12800 Firmware | =v100r003c10 | |
Huawei CloudEngine 12800 Firmware | =v100r005c00 | |
Huawei CloudEngine 12800 Firmware | =v100r005c10 | |
Huawei CloudEngine 12800 Firmware | =v100r006c00 | |
Huawei CloudEngine 12800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8790 has a high severity rating due to the potential for unauthorized access and control over affected devices.
To fix CVE-2016-8790, update the firmware of the affected Huawei CloudEngine devices to version V200R001C00SPC700 or later.
CVE-2016-8790 affects Huawei CloudEngine models 5800, 6800, 7800, 8800, and 12800 with specific firmware versions prior to V200R001C00SPC700.
The potential impacts of CVE-2016-8790 include unauthorized access to network configurations, data breaches, and loss of control over network devices.
There is no known workaround for CVE-2016-8790, so patching the affected systems is the recommended approach.