VYPR
← All advisories
High severity7.5NVD Advisory· Published May 23, 2016· Updated Jun 17, 2026

CVE-2016-4577

CVE-2016-4577

Description

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Huawei/Ngfw Module Firmware
    cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*
  • Huawei/Secospace Usg6300 Firmware2 versions
    cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*
    • (no CPE)range: < V500R001C20SPC100
  • Huawei/Secospace Usg6500 Firmware2 versions
    cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*
    • (no CPE)range: < V500R001C20SPC100
  • Huawei/Secospace Usg6600 Firmware2 versions
    cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*
    • (no CPE)range: < V500R001C20SPC100
  • Huawei/Usg9500 Firmware
    cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*
  • Huawei/Secospace USG9500llm-fuzzy
    Range: < V500R001C20SPC100
  • Huawei/NGFW Modulellm-fuzzy
    Range: < V500R001C20SPC100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.