CVE-2016-8795: Huawei Cloudengine 12800 Firmware

Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days.

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.

Affected products

• Huawei Cloudengine 12800 Firmware: version v100r002c00 only; version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only
• Huawei Cloudengine 5800 Firmware: version v100r002c00 only; version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only
• Huawei Cloudengine 6800 Firmware: version v100r002c00 only; version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only
• Huawei Cloudengine 7800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only
• Huawei Cloudengine 8800 Firmware: version v100r006c00 only
• Huawei Secospace USG6600 Firmware: version v500r001c00 only

Published 2017-04-02. Last modified 2026-06-17.