// For flags

CVE-2016-8798

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.

Huawei USG5500 con software V300R001C00 y V300R001C00 permiten a atacantes eludir el módulo anti-DDoS del USGs para provocar una condición de denegación de servicio en el servidor backend.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-10-18 CVE Reserved
  • 2017-04-02 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-284: Improper Access Control
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Huawei
Search vendor "Huawei"
 Usg5500 Firmware
Search vendor "Huawei" for product "Usg5500 Firmware"
 v300r001c00
Search vendor "Huawei" for product "Usg5500 Firmware" and version "v300r001c00"
-
Affected
in Huawei
Search vendor "Huawei"
 Usg5500
Search vendor "Huawei" for product "Usg5500"
--
Safe
Huawei
Search vendor "Huawei"
 Usg5500 Firmware
Search vendor "Huawei" for product "Usg5500 Firmware"
 v300r001c10
Search vendor "Huawei" for product "Usg5500 Firmware" and version "v300r001c10"
-
Affected
in Huawei
Search vendor "Huawei"
 Usg5500
Search vendor "Huawei" for product "Usg5500"
--
Safe