Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20151111-01-ESPACE
HistoryNov 11, 2015 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Huawei U2990 and U2980

2015-11-1100:00:00
Huawei Technologies
www.huawei.com
24

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

52.7%

Huawei U2990 and U2980 have a DoS vulnerability caused by no error correction mechanism when handling specific signaling packets. An attacker can send malformed packets to cause a denial of service condition in some services of the U2990 and U2980. (Vulnerability ID: HWPSIRT-2015-09025)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8229.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link: <http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461219.htm&gt;

Affected configurations

Vulners
Node
huaweiespace_desktopMatchv100r001c02
OR
huaweiespace_desktopMatchv200r001c02

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

52.7%

Related for HUAWEI-SA-20151111-01-ESPACE