Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20151202-02-LOGCENTER
HistoryDec 02, 2015 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Huawei LogCenter

2015-12-0200:00:00
Huawei Technologies
www.huawei.com
13

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

32.0%

Huawei LogCenter has a DoS vulnerability. After login to the LogCenter, an attacker can add abnormal device information to the log collection module. The LogCenter system does not verify input device information. As a result, the log collection module denies services. (Vulnerability ID: HWPSIRT-2015-09022)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8670.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: <http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-464247.htm&gt;

Affected configurations

Vulners
Node
huaweilogcenterMatchv100r001c10
CPENameOperatorVersion
logcentereqV100R001C10

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

32.0%

Related for HUAWEI-SA-20151202-02-LOGCENTER