Lucene search

K
nvd[email protected]NVD:CVE-2015-8676
HistoryApr 14, 2016 - 3:59 p.m.

CVE-2015-8676

2016-04-1415:59:02
CWE-399
CWE-119
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

65.7%

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets.

Affected configurations

NVD
Node
huaweis2350ei_firmwareRangev200r001c00v200r001sph018
OR
huaweis2350ei_firmwareRangev200r002c00v200r003sph011
AND
huaweis2350eiMatch-
Node
huaweis5300ei_firmwareRangev200r001c00v200r001sph018
OR
huaweis5300ei_firmwareRangev200r002c00v200r003sph011
AND
huaweis5300eiMatch-
Node
huaweis5300si_firmwareRangev200r001c00v200r001sph018
OR
huaweis5300si_firmwareRangev200r002c00v200r003sph011
AND
huaweis5300siMatch-
Node
huaweis5310hi_firmwareRangev200r001c00v200r001sph018
OR
huaweis5310hi_firmwareRangev200r002c00v200r003sph011
AND
huaweis5310hiMatch-
Node
huaweis6300ei_firmwareRangev200r001c00v200r001sph018
OR
huaweis6300ei_firmwareRangev200r002c00v200r003sph011
AND
huaweis6300eiMatch-
Node
huaweis5300li_firmwareRangev200r001c00v200r001sph018
OR
huaweis5300li_firmwareRangev200r002c00v200r003sph011
AND
huaweis5300liMatch-
Node
huaweis9300_firmwareRangev200r001c00v200r001sph023
OR
huaweis9300_firmwareRangev200r002c00v200r003c00
OR
huaweis9300_firmwareMatchv200r003c00
AND
huaweis9300Match-
Node
huaweis7700_firmwareRangev200r001c00v200r001sph023
OR
huaweis7700_firmwareRangev200r002c00v200r003c00
OR
huaweis7700_firmwareMatchv200r003c00
AND
huaweis7700Match-
Node
huaweis9700_firmwareRangev200r001c00v200r001sph023
OR
huaweis9700_firmwareRangev200r002c00v200r003c00
OR
huaweis9700_firmwareMatchv200r003c00
AND
huaweis9700Match-
Node
huaweis2300_firmwareRangev100r006c05v100r006sph022
AND
huaweis2300Match-
Node
huaweis3300_firmwareRangev100r006c05v100r006sph022
AND
huaweis3300Match-

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

65.7%

Related for NVD:CVE-2015-8676