Read the docs
TI-2016-05301 Aliases CVE-2016-6178GHSA-4p27-5ccp-g5cr

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices…

Priority MEDIUM 47CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.

Why it matters now

EPSS 0.02989 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:huawei:ne5000e_firmware:v800r006c00:*:*:*:*:*:*:*v800r006c00VulnerableHuawei
cpe:2.3:h:huawei:ne5000e:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:*v100r003c00VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10:*:*:*:*:*:*:*v100r003c10VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00:*:*:*:*:*:*:*v100r005c00VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10:*:*:*:*:*:*:*v100r005c10VulnerableHuawei
cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ptn_6900-2-m8_firmware:v800r007c00:*:*:*:*:*:*:*v800r007c00VulnerableHuawei
cpe:2.3:h:huawei:ptn_6900-2-m8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:cx600_firmware:v600r008c20:*:*:*:*:*:*:*v600r008c20VulnerableHuawei
  • cpe:2.3:o:huawei:ne5000e_firmware:v800r006c00:*:*:*:*:*:*:* Versions v800r006c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ne5000e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:* Versions v100r003c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10:*:*:*:*:*:*:* Versions v100r003c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00:*:*:*:*:*:*:* Versions v100r005c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10:*:*:*:*:*:*:* Versions v100r005c10 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ptn_6900-2-m8_firmware:v800r007c00:*:*:*:*:*:*:* Versions v800r007c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ptn_6900-2-m8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:cx600_firmware:v600r008c20:*:*:*:*:*:*:* Versions v600r008c20 Vulnerable ·Huawei
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:cx600_firmware:v800r006c00:*:*:*:*:*:*:*v800r006c00VulnerableHuawei
cpe:2.3:o:huawei:cx600_firmware:v800r006c20:*:*:*:*:*:*:*v800r006c20VulnerableHuawei
cpe:2.3:o:huawei:cx600_firmware:v800r007c00:*:*:*:*:*:*:*v800r007c00VulnerableHuawei
cpe:2.3:h:huawei:cx600:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ne40e_firmware:v600r008c20:*:*:*:*:*:*:*v600r008c20VulnerableHuawei
cpe:2.3:o:huawei:ne40e_firmware:v800r006c00:*:*:*:*:*:*:*v800r006c00VulnerableHuawei
cpe:2.3:o:huawei:ne40e_firmware:v800r006c20:*:*:*:*:*:*:*v800r006c20VulnerableHuawei
cpe:2.3:o:huawei:ne40e_firmware:v800r006c30:*:*:*:*:*:*:*v800r006c30VulnerableHuawei
cpe:2.3:o:huawei:ne40e_firmware:v800r007c00:*:*:*:*:*:*:*v800r007c00VulnerableHuawei
cpe:2.3:h:huawei:ne40e:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:cx600_firmware:v800r006c00:*:*:*:*:*:*:* Versions v800r006c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cx600_firmware:v800r006c20:*:*:*:*:*:*:* Versions v800r006c20 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cx600_firmware:v800r007c00:*:*:*:*:*:*:* Versions v800r007c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:cx600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ne40e_firmware:v600r008c20:*:*:*:*:*:*:* Versions v600r008c20 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:ne40e_firmware:v800r006c00:*:*:*:*:*:*:* Versions v800r006c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:ne40e_firmware:v800r006c20:*:*:*:*:*:*:* Versions v800r006c20 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:ne40e_firmware:v800r006c30:*:*:*:*:*:*:* Versions v800r006c30 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:ne40e_firmware:v800r007c00:*:*:*:*:*:*:* Versions v800r007c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ne40e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-6178
  2. 2026-10-03 Alias added: GHSA-4p27-5ccp-g5cr

References

Advisory 1

  • TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
  • TI-2020-07360 Improper authentication in Huawei CloudEngine 12800 CVSS 3.1HIGH 7.8
  • TI-2020-07334 Memory leak in Huawei CloudEngine 12800 CVSS 3.1HIGH 7.5
  • TI-2017-11262 Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine… CVSS 3.0HIGH 7.5
  • TI-2017-05722 Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine… CVSS 3.0HIGH 7.5
  • TI-2021-17220 There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine… CVSS 3.1HIGH 7.5
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences