CVE-2015-2800

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-06-08

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• S5300 Firmware (Huawei)
• S5700 Firmware (Huawei)
• S6300 Firmware (Huawei)
• S6700 Firmware (Huawei)
• S7700 Firmware (Huawei)
• S9300 Firmware (Huawei)
• S9700 Firmware (Huawei)

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.htm
• http://www.securityfocus.com/bid/73355