NVD

Id
22015  
Name
CVE-2016-8276  
Description
Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-03  
Modified Date
2016-10-04  
Seq
2016-8276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117877 22015 CVE-2016-8276 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-en  View
117878 22015 CVE-2016-8276 92962  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4327 JVNDB-2016-005100 複数の Huawei USG 製品のソフトウェアの PPPoE モジュールにおけるバッファオーバーフローの脆弱性 Huawei USG2100、USG2200、USG5100、および USG5500 のソフトウェアの PPPoE (Point-to-Point Protocol over Ethernet) モジュールには、サーバ上で CHAP 認証が設定されている場合、バッファオーバーフローの脆弱性が存在します。 CVE-2016-8276 94783 CVE-2016-8276 22015 9.3 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005100.html 2016-09-14 2016-10-06 View