Lucene search

K
cve[email protected]CVE-2015-2800
HistoryJun 08, 2017 - 4:29 p.m.

CVE-2015-2800

2017-06-0816:29:00
CWE-287
web.nvd.nist.gov
28
huawei
switches
v200r001sph012
v200r001sph015
authentication
vulnerability
nvd
cve-2015-2800

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

57.1%

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected configurations

NVD
Node
huaweis5700_firmwareRangev200r001c00spc300
AND
huaweicampus_s5700Match-
Node
huaweis5300_firmwareRangev200r001c00spc300
AND
huaweicampus_s5300Match-
Node
huaweis6300_firmwareRangev200r001c00spc300
AND
huaweicampus_s6300Match-
Node
huaweis6700_firmwareRangev200r001c00spc300
AND
huaweicampus_s6700Match-
Node
huaweis7700_firmwareRangev200r001c00spc300
AND
huaweicampus_s7700Match-
Node
huaweis9300_firmwareRangev200r001c00spc300
AND
huaweicampus_s9300Match-
Node
huaweis9700_firmwareRangev200r001c00spc300
AND
huaweicampus_s9700Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

57.1%

Related for CVE-2015-2800