Lucene search

[email protected]CVE-2015-8677

HistoryApr 14, 2016 - 3:59 p.m.

CVE-2015-8677

2016-04-1415:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve

2015

8677

memory leak

huawei

campus series switches

denial of service

nvd

security advisory

software vulnerability

remote authentication

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.5%

JSON

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

CPENameOperatorVersion
huawei:s5300ei_firmwarehuawei s5300ei firmwareltv200r003sph011
huawei:s5300ei_firmwarehuawei s5300ei firmwareltv200r005sph008
huawei:s5300si_firmwarehuawei s5300si firmwareltv200r001sph018
huawei:s5300si_firmwarehuawei s5300si firmwareltv200r003sph011
huawei:s5310hi_firmwarehuawei s5310hi firmwareltv200r001sph018
huawei:s5310hi_firmwarehuawei s5310hi firmwareltv200r003sph011
huawei:s6300ei_firmwarehuawei s6300ei firmwareltv200r001sph018
huawei:s6300ei_firmwarehuawei s6300ei firmwareltv200r003sph011
huawei:s5300li_firmwarehuawei s5300li firmwareltv200r003sph011
huawei:s5300li_firmwarehuawei s5300li firmwareltv200r005sph008

CPE	Name	Operator	Version
huawei:s5300ei_firmware	huawei s5300ei firmware	lt	v200r003sph011
huawei:s5300ei_firmware	huawei s5300ei firmware	lt	v200r005sph008
huawei:s5300si_firmware	huawei s5300si firmware	lt	v200r001sph018
huawei:s5300si_firmware	huawei s5300si firmware	lt	v200r003sph011
huawei:s5310hi_firmware	huawei s5310hi firmware	lt	v200r001sph018
huawei:s5310hi_firmware	huawei s5310hi firmware	lt	v200r003sph011
huawei:s6300ei_firmware	huawei s6300ei firmware	lt	v200r001sph018
huawei:s6300ei_firmware	huawei s6300ei firmware	lt	v200r003sph011
huawei:s5300li_firmware	huawei s5300li firmware	lt	v200r003sph011
huawei:s5300li_firmware	huawei s5300li firmware	lt	v200r005sph008

Rows per page:

1-10 of 271

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.5%

JSON

Related for CVE-2015-8677

prion1 cvelist1 huawei1