High severity · published Apr 11, 2016
CVE-2016-3678
Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted…
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
S5300 Firmware · Huawei
v200r003c00spc500 · source: NVD
SF
S5700 Firmware · Huawei
v200r003c00spc500 · source: NVD
SF
S7700 Firmware · Huawei
v200r003c00spc500 · source: NVD
SF
S9300 Firmware · Huawei
v200r003c00spc500 · source: NVD
SF
S9700 Firmware · Huawei
v200r003c00spc500 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-3678
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-3678
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-switch-en
More from S5300 Firmware
7.5
CVE-2019-5285
Some Huawei S series switches have a DoS vulnerability
7.5
CVE-2017-17165
IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00,…
7.5
CVE-2014-4705
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200,…
7.5
CVE-2017-8147
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
7.5
CVE-2015-2800
The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before…