CVE-2016-6178 - CVE House

Back to Database

Status published Critical CVE-2016-6178

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN...

9.8 CVSS

Vulnerability Description

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-6178

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →

Input verification vulnerability in the system service module Impact: Successful exploitation...

There is a release of invalid pointer vulnerability in some...

There is an information exposure vulnerability on several Huawei Products....

Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...

Affected Vendor

huawei

View all reports →

Affected Software

ne5000e firmware, cloudengine 12800 firmware, ptn 6900-2-m8 firmware, cx600 firmware, ne40e firmware

Vulnerable Versions:

v800r006c00, v100r003c00, v100r003c10, v100r005c00, v100r005c10, v800r007c00, v600r008c20, v800r006c20, v800r006c30

Timeline

Official Publish: August 2nd, 2016

Last Modified: August 6th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.