CVE-2016-8276

CVE-2016-8276 describes a critical buffer overflow vulnerability in the PPPoE module of several Huawei USG series unified security gateways (USG2100, USG2200, USG5100, USG5500) running software before V300R001C10SPC600. This flaw, triggered when CHAP authentication is configured on the server, allows unauthenticated remote attackers to cause a denial of service (server restart) or potentially execute arbitrary code by sending specially crafted packets during the authentication process. With a CVSS score of 9.8 (Critical), it represents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.