Lucene search

MitreCVE-2015-8675

HistoryJan 15, 2016 - 7:59 p.m.

CVE-2015-8675

2016-01-1519:59:00

CWE-255

mitre

web.nvd.nist.gov

huawei

s5300

switches

password

upload

vulnerability

nvd

cve-2015-8675

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

33.4%

JSON

Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive password information by reading the display.

Affected configurations

Nvd

Node

huaweis5300_firmwareMatchv200r005c02

AND

huaweis5300

VendorProductVersionCPE
huaweis5300_firmwarev200r005c02cpe:2.3:o:huawei:s5300_firmware:v200r005c02:*:*:*:*:*:*:*
huaweis5300*cpe:2.3:h:huawei:s5300:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	s5300_firmware	v200r005c02	cpe:2.3:o:huawei:s5300_firmware:v200r005c02:::::::*
huawei	s5300	*	cpe:2.3:h:huawei:s5300::::::::

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160112-01-switch-en

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

33.4%

JSON

Related for CVE-2015-8675