CVSS 3.0
7.5 highCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2016-4577
High (7.5) in huawei. EPSS 1.0% chance of exploitation in the next 30 days.
Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:ngfw_module_firmware
- huawei:secospace_usg6300_firmware
- huawei:secospace_usg6500_firmware
- huawei:secospace_usg6600_firmware
- huawei:usg9500_firmware