Lucene search

Huawei TechnologiesHUAWEI-SA-20150319-01-CAMPUS-SWITCH

HistoryMar 19, 2015 - 12:00 a.m.

Security Advisory – Authentication Caused Memory Overflow Vulnerability in Some Huawei Switch Products

2015-03-1900:00:00

Huawei Technologies

www.huawei.com

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

57.3%

JSON

The user authentication module in some Huawei switch products has the memory overflow vulnerability that can cause device restart when users log in improperly

(Vulnerability ID: HWPSIRT-2015-02014).

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-2800.

Affected configurations

Vulners

Node

huaweicampus_s5700MatchV200R001C00SPC300

huaweicampus_s5300MatchV200R001C00SPC300

huaweicampus_s6300MatchV200R001C00SPC300

huaweicampus_s6700MatchV200R001C00SPC300

huaweicampus_s7700MatchV200R001C00SPC300

huaweicampus_s9300MatchV200R001C00SPC300

huaweicampus_s9700MatchV200R001C00SPC300

CPENameOperatorVersion
campus switch s5700eqV200R001C00SPC300
campus switch s5300eqV200R001C00SPC300
campus switch s6300eqV200R001C00SPC300
campus switch s6700eqV200R001C00SPC300
campus switch s7700eqV200R001C00SPC300
campus switch s9300eqV200R001C00SPC300
campus switch s9700eqV200R001C00SPC300

Name	Operator	Version
campus switch s5700	eq	V200R001C00SPC300
campus switch s5300	eq	V200R001C00SPC300
campus switch s6300	eq	V200R001C00SPC300
campus switch s6700	eq	V200R001C00SPC300
campus switch s7700	eq	V200R001C00SPC300
campus switch s9300	eq	V200R001C00SPC300
campus switch s9700	eq	V200R001C00SPC300

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

57.3%

JSON

Related for HUAWEI-SA-20150319-01-CAMPUS-SWITCH