CVE-2016-6669
HighSummary
Buffer overflow in the AAA module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to device takeover and network security breaches.
Recommendation
It is recommended to update the software to version V300R001C10SPC600 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Huawei USG2100, USG2200, USG5100, USG5500
Original NVD description (English source)
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.