CVE-2016-6669
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
Desbordamiento de búfer en el módulo Authentication, Authorization y Accounting (AAA) en las puertas de entrada de seguridad unificadas USG2100, USG2200, USG5100 y USG5500 en Huawei con software en versiones anteriores a V300R001C10SPC600 permite a servidores RADIUS remotos autenticados ejecutar código arbitrario enviando un paquete EAP manipulado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-08-10 CVE Reserved
- 2016-09-22 CVE Published
- 2023-04-26 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en | Vdb Entry | |
| http://www.securityfocus.com/bid/92441 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2100 Firmware Search vendor "Huawei" for product "Usg2100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg2200 Firmware Search vendor "Huawei" for product "Usg2200 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg2200 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5100 Firmware Search vendor "Huawei" for product "Usg5100 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5100 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c00 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2100 Search vendor "Huawei" for product "Usg2100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg2200 Search vendor "Huawei" for product "Usg2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5100 Search vendor "Huawei" for product "Usg5100" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg5500 Firmware Search vendor "Huawei" for product "Usg5500 Firmware" | <= v300r001c10 Search vendor "Huawei" for product "Usg5500 Firmware" and version " <= v300r001c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg5500 Search vendor "Huawei" for product "Usg5500" | - | - |
Safe
|