// For flags

CVE-2016-8278

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.

Gateways de seguridad unificada Huawei USG9520, USG9560 y USG9580 con software en versiones anteriores a V300R001C01SPCa00 permiten a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de una URL no especificada.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-09-18 CVE Reserved
  • 2016-10-03 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Huawei
Search vendor "Huawei"
Usg9520
Search vendor "Huawei" for product "Usg9520"
v300r001c01
Search vendor "Huawei" for product "Usg9520" and version "v300r001c01"
-
Affected
Huawei
Search vendor "Huawei"
Usg9560
Search vendor "Huawei" for product "Usg9560"
v300r001c01
Search vendor "Huawei" for product "Usg9560" and version "v300r001c01"
-
Affected
Huawei
Search vendor "Huawei"
Usg9580
Search vendor "Huawei" for product "Usg9580"
v300r001c01
Search vendor "Huawei" for product "Usg9580" and version "v300r001c01"
-
Affected