← Vulnerability feed

Vulnerability record · CVE-2016-6178 · published 2 August 2016

CVE-2016-6178: Huawei ne5000e firmware improper input validation vulnerability

Huawei · Ne5000e Firmware

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.

9.8 CVSS 3.0 Critical EPSS 3.0% · top 12.9% CWE-20 · Improper input validation
9.8CVSS 3.0 base score, v2 7.5
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en Vendor Advisory
http://www.securityfocus.com/bid/91772 Third Party AdvisoryVDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en Vendor Advisory
http://www.securityfocus.com/bid/91772 Third Party AdvisoryVDB Entry

Track CVE-2016-6178 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%7.8CVE-2020-9207Huawei cloudengine 12800 firmware improper authentication vulnerabilityThere is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. A…EPSS 0.57%7.5CVE-2021-40008Huawei cloudengine 7800 firmware vulnerabilityThere is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 a…EPSS 0.68%7.5CVE-2021-22328Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker m…EPSS 0.68%7.5CVE-2021-22332Huawei cloudengine 12800 firmware double free vulnerabilityThere is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a f…EPSS 0.68%7.5CVE-2021-22393Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affect…EPSS 0.68%7.5CVE-2020-9094Huawei cloudengine 12800 firmware out-of-bounds read vulnerabilityThere is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. At…EPSS 0.75%7.5CVE-2020-9124Huawei cloudengine 12800 firmware memory leak vulnerabilityThere is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerabili…EPSS 0.93%

Source: NIST National Vulnerability Database (record CVE-2016-6178), CISA KEV, FIRST EPSS (scores of 2026-10-18). This page is refreshed as NVD updates the record.