CVE-2016-8780
Summary
| CVE | CVE-2016-8780 |
|---|---|
| State | PUBLISHED |
| Assigner | huawei |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-04-02 20:59:01 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition. |
Risk And Classification
Primary CVSS: v3.0 6.5 MEDIUM from [email protected]
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Problem Types: CWE-400 | denial of service
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 6.5 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 2.0 | [email protected] | Primary | 6.8 | AV:N/AC:L/Au:S/C:N/I:N/A:C |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:L/Au:S/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v100r006c00 | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v100r006c00 | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v100r006c00 | All | All | All |
| Hardware | Huawei | Cloudengine 8800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 8800 Firmware | v100r006c00 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Na | CloudEngine 6800 CloudEngine 7800 CloudEngine 8800 CloudEngine 12800 CloudEngine 6800 V100R006C00CloudEngine 7800 V100R006C00CloudEngine 8800 V100R006C00CloudEngine 12800 V100R006C00 | affected CloudEngine 6800, CloudEngine 7800, CloudEngine 8800, CloudEngine 12800 CloudEngine 6800 V100R006C00,CloudEngine 7800 V100R006C00,CloudEngine 8800 V100R006C00,CloudEngine 12800 V100R006C00, | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple Huawei CloudEngine Products CVE-2016-8780 Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Security Advisory - DoS Vulnerability in Huawei Switches | af854a3a-2127-422b-91ae-364da2661108 | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.