Lucene search

K
nvd[email protected]NVD:CVE-2015-2800
HistoryJun 08, 2017 - 4:29 p.m.

CVE-2015-2800

2017-06-0816:29:00
CWE-287
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

57.4%

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected configurations

NVD
Node
huaweis5700_firmwareRangev200r001c00spc300
AND
huaweicampus_s5700Match-
Node
huaweis5300_firmwareRangev200r001c00spc300
AND
huaweicampus_s5300Match-
Node
huaweis6300_firmwareRangev200r001c00spc300
AND
huaweicampus_s6300Match-
Node
huaweis6700_firmwareRangev200r001c00spc300
AND
huaweicampus_s6700Match-
Node
huaweis7700_firmwareRangev200r001c00spc300
AND
huaweicampus_s7700Match-
Node
huaweis9300_firmwareRangev200r001c00spc300
AND
huaweicampus_s9300Match-
Node
huaweis9700_firmwareRangev200r001c00spc300
AND
huaweicampus_s9700Match-

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

57.4%

Related for NVD:CVE-2015-2800