CVE-2016-4577: Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, US...

Security readout for executives and security teams

This flaw affects Huawei firewall Smart DNS handling. A malicious network packet with invalid parameters could crash the device or potentially run attacker-controlled code. Because the affected systems are security gateways, successful exploitation could disrupt perimeter protection, but the provided sources do not show active exploitation. Organizations using the named Huawei firewall families with Smart DNS enabled and software older than V500R001C20SPC100 are the likely exposure group. Prioritize verification and upgrade if these Huawei firewalls are deployed. The business concern is loss or compromise of perimeter security infrastructure, but urgency depends on whether affected models and Smart DNS are present. Mitigation focus: Identify affected Huawei firewall models and software versions.; Upgrade affected devices to V500R001C20SPC100 or later vendor-fixed software.; Review Huawei PSIRT guidance for any model-specific workaround or sequencing..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.