CVE-2016-8276

Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.

• CWE-119

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-enVendor Advisory
• http://www.securityfocus.com/bid/92962Third Party Advisory, VDB Entry
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-enVendor Advisory
• http://www.securityfocus.com/bid/92962Third Party Advisory, VDB Entry

Published

Oct 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8270Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8271Huawei eSpace IAD V300R002C01SPC100 and earlier versions hav…
• CVE-2016-8272Huawei PC client software HiSuite 4.0.5.300_OVE has an infor…
• CVE-2016-8273Huawei PC client software HiSuite 4.0.5.300_OVE uses insecur…
• CVE-2016-8274Huawei PC client software HiSuite 4.0.5.300_OVE has a dynami…
• CVE-2016-8275Huawei AnyOffice V200R006C00 could allow an authenticated, r…
• CVE-2016-8277Huawei USG9520, USG9560, and USG9580 unified security gatewa…
• CVE-2016-8278Huawei USG9520, USG9560, and USG9580 unified security gatewa…
• CVE-2016-8279The video driver in Huawei Mate S smartphones with software …
• CVE-2016-8280Directory traversal vulnerability in Huawei eSight before V3…
• CVE-2016-8281Unspecified vulnerability in the Oracle Platform Security fo…
• CVE-2016-8282Vulnerability in the Oracle FLEXCUBE Private Banking compone…