CVE-2016-5368: Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service...

Security readout for executives and security teams

CVE-2016-5368 is a denial-of-service issue in Huawei AR3200 routers before V200R007C00SPC900. A remote attacker could consume device memory by sending many crafted MPLS packets, potentially disrupting routing service. The source bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most relevant where Huawei AR3200 routers process MPLS traffic, especially from untrusted or weakly controlled network paths. Organizations without Huawei AR3200 devices, or without MPLS handling on those devices, are unlikely to be affected based on the supplied sources. Treat this as a network availability risk, not confirmed data theft. Prioritize if Huawei AR3200 routers support important MPLS-connected sites or edge services. Urgency is lower where affected devices are absent, upgraded, or isolated from untrusted MPLS traffic. Mitigation focus: Identify any Huawei AR3200 routers in service.; Upgrade affected devices to V200R007C00SPC900 or later where applicable.; Review Huawei PSIRT guidance before scheduling remediation..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.