CVE-2016-5435 : Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace U

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.

Published 2016-06-24 17:59:03

Updated 2025-04-12 10:46:41

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2016-5435

Huawei » Huawei Firmware » Version: V5500r001c00
cpe:2.3:h:huawei:huawei_firmware:v5500r001c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ips Module » Version: N/A
When used together with: Huawei » Ngfw Module » Version: N/A
When used together with: Huawei » Nip6300 » Version: N/A
When used together with: Huawei » Nip6600 » Version: N/A
When used together with: Huawei » Secospace Antiddos8000 » Version: N/A
When used together with: Huawei » Secospace Usg6300 » Version: N/A
When used together with: Huawei » Secospace Usg6500 » Version: N/A
When used together with: Huawei » Secospace Usg6600 » Version: N/A
When used together with: Huawei » Usg9500 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-5435

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-5435

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2016-5435

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-5435

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en

Security Advisory - Memory Leak Vulnerability in Several Huawei Products
Vendor Advisory

Jump to

Vulnerability Details : CVE-2016-5435

Products affected by CVE-2016-5435

Exploit prediction scoring system (EPSS) score for CVE-2016-5435

CVSS scores for CVE-2016-5435

CWE ids for CVE-2016-5435

References for CVE-2016-5435