High severity · published Sep 22, 2016
CVE-2016-6669
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before…
7.5
CVSS
3.3%
EPSS
No
On KEV
Description
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UF
Usg2100 Firmware · Huawei
through v300r001c00; through v300r001c10 · source: NVD
UF
Usg2200 Firmware · Huawei
through v300r001c00; through v300r001c10 · source: NVD
UF
Usg5100 Firmware · Huawei
through v300r001c00; through v300r001c10 · source: NVD
UF
Usg5500 Firmware · Huawei
through v300r001c00; through v300r001c10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6669
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en
www.securityfocus.com
http://www.securityfocus.com/bid/92441
More from Usg2100 Firmware
8.8
CVE-2014-9137
Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software…
8.8
CVE-2014-9136
Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface