Vulnerability Database

313,495

Total vulnerabilities in the database

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Published: May 23, 2016
Updated: Nov 9, 2025
CVE: CVE-2016-4577
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:A/AC:H/Au:N/C:C/I:C/A:C

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
huawei / usg9500_firmware	500r001c00	500r001c00.x
huawei / ngfw_module_firmware	500r001c00	500r001c00.x
huawei / secospace_usg6300_firmware	500r001c00	500r001c00.x
huawei / secospace_usg6600_firmware	500r001c00	500r001c00.x
huawei / secospace_usg6500_firmware	500r001c00	500r001c00.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo