vulnerability
Huawei VRP: CVE-2016-8276: Buffer Overflow Vulnerability in Huawei USG Products
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Sep 14, 2016 | Apr 17, 2026 | Apr 27, 2026 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Sep 14, 2016
Added
Apr 17, 2026
Modified
Apr 27, 2026
Description
The Point-to-Point Protocol over Ethernet (PPPoE) module of the USG has a buffer overflow vulnerability. When Challenge Handshake Authentication Protocol (CHAP) authentication is configured on the server, an attacker may send abnormal attack packets to the server during authentication to cause buffer overflow. Successful exploit could allow the attacker to execute arbitrary code and cause the server to restart. (Vulnerability ID: HWPSIRT-2016-06053).
Solution
huawei-vrp-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.