Vulnerabilities > Huawei > Usg5500 Firmware > v300r001c10

DATE CVE VULNERABILITY TITLE RISK
2017-04-02 CVE-2016-8798 Improper Access Control vulnerability in Huawei Usg5500 Firmware V300R001C00/V300R001C10
Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.
network
low complexity
huawei CWE-284
7.5
2016-09-22 CVE-2016-6669 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
network
high complexity
huawei CWE-119
7.5