PT-2016-6429 · Huawei · Huawei Secospace Usg6500+8

Published 2016-06-24 · Updated 2016-06-28 · CVE-2016-5435

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions prior to V500R001C20SPC100 Huawei NGFW Module versions prior to V500R001C20SPC100 Huawei NIP6300 versions prior to V500R001C20SPC100 Huawei NIP6600 versions prior to V500R001C20SPC100 Huawei Secospace USG6300 versions prior to V500R001C20SPC100 Huawei Secospace USG6500 versions prior to V500R001C20SPC100 Huawei Secospace USG6600 versions prior to V500R001C20SPC100 Huawei Secospace USG9500 versions prior to V500R001C20SPC100 Huawei AntiDDoS8000 V500R001C00 versions prior to V500R001C20SPC100

Description A memory leak issue exists when two devices are not directly connected in hot standby networking, allowing remote attackers to cause a denial of service via a crafted packet, resulting in memory consumption and reboot.

Recommendations For Huawei IPS Module versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei NGFW Module versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei NIP6300 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei NIP6600 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei Secospace USG6300 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei Secospace USG6500 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei Secospace USG6600 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei Secospace USG9500 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later. For Huawei AntiDDoS8000 V500R001C00 versions prior to V500R001C20SPC100, update to V500R001C20SPC100 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-5435

Affected Products

Huawei Antiddos8000

Huawei Ips Module

Huawei Ngfw Module

Huawei Nip6300

Huawei Nip6600

Huawei Secospace Usg6300

Huawei Secospace Usg6500

Huawei Secospace Usg6600

Huawei Secospace Usg9500

References · 2

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5435 · Security Note