CVE-2016-5368

HIGH

Huawei AR3200 < V200R007C00SPC900 - Denial of Service via MPLS Packet Handling

Title source: llm

Description

Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) packets.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/91557

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

Scores

CVSS v3 7.5

EPSS 0.0028

EPSS Percentile 51.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-399

Status published

Products (3)

huawei/ar3200_firmware v200r005c20

huawei/ar3200_firmware v200r005c32

huawei/ar3200_firmware v200r007c00

Published Jun 30, 2016

Tracked Since Feb 18, 2026