Lucene search

K
nvd[email protected]NVD:CVE-2015-8677
HistoryApr 14, 2016 - 3:59 p.m.

CVE-2015-8677

2016-04-1415:59:03
CWE-399
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

Affected configurations

NVD
Node
huaweis5300ei_firmwareRangev200r003c00v200r003sph011
OR
huaweis5300ei_firmwareRangev200r005c00v200r005sph008
AND
huaweis5300eiMatch-
Node
huaweis5300si_firmwareRangev200r001c00v200r001sph018
OR
huaweis5300si_firmwareRangev200r002c00v200r003sph011
AND
huaweis5300siMatch-
Node
huaweis5310hi_firmwareRangev200r001c00v200r001sph018
OR
huaweis5310hi_firmwareRangev200r002c00v200r003sph011
AND
huaweis5310hiMatch-
Node
huaweis6300ei_firmwareRangev200r001c00v200r001sph018
OR
huaweis6300ei_firmwareRangev200r002c00v200r003sph011
AND
huaweis6300eiMatch-
Node
huaweis5300li_firmwareRangev200r003c00v200r003sph011
OR
huaweis5300li_firmwareRangev200r005c00v200r005sph008
OR
huaweis5300li_firmwareRangev200r006c00v200r006sph002
AND
huaweis5300liMatch-
Node
huaweis2350ei_firmwareRangev200r003c00v200r003sph011
OR
huaweis2350ei_firmwareRangev200r005c00v200r005sph008
OR
huaweis2350ei_firmwareRangev200r006c00v200r006sph002
AND
huaweis2350eiMatch-
Node
huaweis9300_firmwareRangev200r003c00v200r003sph011
OR
huaweis9300_firmwareRangev200r005c00v200r005sph009
OR
huaweis9300_firmwareRangev200r006c00v200r006sph003
AND
huaweis9300Match-
Node
huaweis9700_firmwareRangev200r003c00v200r003sph011
OR
huaweis9700_firmwareRangev200r005c00v200r005sph009
OR
huaweis9700_firmwareRangev200r006c00v200r006sph003
AND
huaweis9700Match-
Node
huaweis7700_firmwareRangev200r003c00v200r003sph011
OR
huaweis7700_firmwareRangev200r005c00v200r005sph009
OR
huaweis7700_firmwareRangev200r006c00v200r006sph003
AND
huaweis7700Match-
Node
huaweis5720hi_firmwareRangev200r006c00v200r006sph002
AND
huaweis5720hiMatch-
Node
huaweis5720ei_firmwareRangev200r006c00v200r006sph002
AND
huaweis5720eiMatch-
Node
huaweis2300_firmwareRangev100r006c05v100r006sph022
AND
huaweis2300Match-
Node
huaweis3300_firmwareRangev100r006c05v100r006sph022
AND
huaweis3300Match-

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

Related for NVD:CVE-2015-8677