Description
Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-en
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92962
Scores
CVSS v3
9.8
EPSS
0.0298
EPSS Percentile
86.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (8)
huawei/usg2100
v300r001c00
huawei/usg2100
v300r001c10
huawei/usg2200
v300r001c00
huawei/usg2200
v300r001c10
huawei/usg5100
v300r001c00
huawei/usg5100
v300r001c10
huawei/usg5500
v300r001c00
huawei/usg5500
v300r001c10
Published
Oct 03, 2016
Tracked Since
Feb 18, 2026