CVE-2016-8782: Huawei Cloudengine 12800 Firmware

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices repeatedly. Due to improper validation of some specific fields of the packet, the LDP processing module does not release the memory, resulting in memory leak.

Affected products

• Huawei Cloudengine 12800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only

Published 2018-03-09. Last modified 2026-06-17.