Lucene search

K
nvd[email protected]NVD:CVE-2015-8086
HistoryOct 03, 2016 - 9:59 p.m.

CVE-2015-8086

2016-10-0321:59:04
CWE-326
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.

Affected configurations

NVD
Node
huaweiquidway_s5300_firmwareMatchv200r001c00spc300
AND
huaweiquidway_s5300Match-
Node
huaweiquidway_s9300_firmwareMatchv200r001c00spc300
OR
huaweiquidway_s9300_firmwareMatchv200r002c00spc100
OR
huaweiquidway_s9300_firmwareMatchv200r003c00spc500
AND
huaweiquidway_s9300Match-
Node
huaweis5700_firmwareMatchv200r001c00
OR
huaweis5700_firmwareMatchv200r002c00
OR
huaweis5700_firmwareMatchv200r003c00
OR
huaweis5700_firmwareMatchv200r005c00
OR
huaweis5700_firmwareMatchv200r006c00
AND
huaweis5700Match-
Node
huaweis12700_firmwareMatchv200r005c00
OR
huaweis12700_firmwareMatchv200r006c00
AND
huaweis12700Match-
Node
huaweiar_firmwareMatchv200r001
OR
huaweiar_firmwareMatchv200r002
OR
huaweiar_firmwareMatchv200r003
OR
huaweiar_firmwareMatchv200r005c10
OR
huaweiar_firmwareMatchv200r005c20
OR
huaweiar_firmwareMatchv200r005c30
AND
huaweiarMatch-
Node
huaweis5300_firmwareMatchv200r002c00
OR
huaweis5300_firmwareMatchv200r005c00spc500
OR
huaweis5300_firmwareMatchv200r006c00spc500
AND
huaweis5300Match-
Node
huaweis9300_firmwareMatchv200r005c00spc300
OR
huaweis9300_firmwareMatchv200r006c00spc500
AND
huaweis9300Match-

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

Related for NVD:CVE-2015-8086