CVE-2016-8773: huawei s12700_firmware Improper Input Validation
Vulnerability summary
CVE-2016-8773 is a high (CVSS 7.5) Improper Input Validation vulnerability in huawei s12700_firmware. EPSS estimates a 0.92% chance of exploitation in the next 30 days, higher than 59.6% of scored vulnerabilities.
Timeline
- 02-04-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with software V200R003C00, V200R005C00, V200R008C00, V200R009C00; S6700 with software V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R008C00, V200R009C00; S7700 with software V200R007C00, V200R008C00, V200R009C00; S9300 with software V200R007C00, V200R008C00, V200R009C00; S9700 with software V200R007C00, V200R008C00, V200R009C00; and S12700 with software V200R007C00, V200R007C01, V200R008C00, V200R009C00 allow the attacker to cause a denial of service condition by sending malformed MPLS packets.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.92%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.92% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei8 products
- s12700_firmwarev200r007c00 | v200r007c01 | v200r008c00 | v200r009c00
- s5300_firmwarev200r003c00 | v200r007c00 | v200r008c00 | v200r009c00
- s5700_firmwarev200r001c00 | v200r002c00 | v200r003c00 | v200r005c00 | v200r005c03 | v200r007c00 | v200r008c00 | v200r009c00
- s6300_firmwarev200r003c00 | v200r005c00 | v200r008c00 | v200r009c00
- s6700_firmwarev200r001c00 | v200r001c01 | v200r002c00 | v200r003c00 | v200r005c00 | v200r007c00 | v200r008c00 | v200r009c00
1 vendor · 8 products
References
2 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20161111-01-mpls-enX Refsource CONFIRMVendor Advisory