Lucene search

[email protected]CVE-2015-7846

HistorySep 25, 2017 - 9:29 p.m.

CVE-2015-7846

2017-09-2521:29:00

CWE-200

[email protected]

web.nvd.nist.gov

huawei

s7700

s9700

s9300

ar200

ar1200

ar2200

ar3200

cve-2015-7846

information security

vulnerability

physical access

sensitive information

nvd

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

21.2%

JSON

Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.

CPENameOperatorVersion
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r001c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r002c00spc100
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r003c00spc500
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r005c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r006c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r006c00spc500
huawei:s9700_firmwarehuawei s9700 firmwareeqv200r001c00spc300
huawei:s9700_firmwarehuawei s9700 firmwareeqv200r002c00spc100
huawei:s9700_firmwarehuawei s9700 firmwareeqv200r003c00spc500
huawei:s9700_firmwarehuawei s9700 firmwareeqv200r005c00spc300

CPE	Name	Operator	Version
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r001c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r002c00spc100
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r003c00spc500
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r005c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r006c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r006c00spc500
huawei:s9700_firmware	huawei s9700 firmware	eq	v200r001c00spc300
huawei:s9700_firmware	huawei s9700 firmware	eq	v200r002c00spc100
huawei:s9700_firmware	huawei s9700 firmware	eq	v200r003c00spc500
huawei:s9700_firmware	huawei s9700 firmware	eq	v200r005c00spc300

Rows per page:

1-10 of 541

References

www.securityfocus.com/bid/76173

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

21.2%

JSON

Related for CVE-2015-7846

prion1 seebug1 cvelist1