CVEvulnerability

CVE-2015-2800

7.5 HIGH Published 2017-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-287

Description

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected configurations

• huawei s5700 firmware (<= v200r001c00spc300) • huawei s5300 firmware (<= v200r001c00spc300) • huawei s6300 firmware (<= v200r001c00spc300) • huawei s6700 firmware (<= v200r001c00spc300) • huawei s7700 firmware (<= v200r001c00spc300) • huawei s9300 firmware (<= v200r001c00spc300) • huawei s9700 firmware (<= v200r001c00spc300)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References