CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."

Score

CVSS 3.0 6.5 Medium

Status

Modified - hp-security-alert@hp.com

Published

2016-01-05

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Jc072b Hp 12500 Main Processing Unit (Hp)
• Jc085a Hp A12518 Switch Chassis (Hp)
• Jc086a Hp A12508 Switch Chassis (Hp)
• Jc124a Hp A9508 Switch Chassis (Hp)
• Jc124b Hp 9505 Switch Chassis (Hp)
• Jc125a Hp A9512 Switch Chassis (Hp)
• Jc125b Hp 9512 Switch Chassis (Hp)
• Jc474a Hp A9508-v Switch Chassis (Hp)
• Jc474b Hp 9508-v Switch Chassis (Hp)
• Jc611a Hp 10508-v Switch Chassis (Hp)
• Jc612a Hp 10508 Switch Chassis (Hp)
• Jc613a Hp 10504 Switch Chassis (Hp)
• Jc652a Hp 12508 Dc Switch Chassis (Hp)
• Jc653a Hp 12518 Dc Switch Chassis (Hp)
• Jc654a Hp 12504 Ac Switch Chassis (Hp)
• Jc655a Hp 12504 Dc Switch Chassis (Hp)
• Jc748a Hp 10512 Switch Chassis (Hp)
• Jc808a Hp 12500 Taa Main Processing Unit (Hp)
• Jf430a Hp A12518 Switch Chassis (Hp)
• Jf430b Hp 12518 Switch Chassis (Hp)
• Jf430c Hp 12518 Ac Switch Chassis (Hp)
• Jf431a Hp A12508 Switch Chassis (Hp)
• Jf431b Hp 12508 Switch Chassis (Hp)
• Jf431c Hp 12508 Ac Switch Chassis (Hp)
• Jg296a Hp 5920af-24xg Switch (Hp)
• Jg353a Hp Hsr6602-g Router (Hp)
• Jg354a Hp Hsr6602-xg Router (Hp)
• Jg361a Hp Hsr6802 Router Chassis (Hp)
• Jg361b Hp Hsr6802 Router Chassis (Hp)
• Jg362a Hp Hsr6804 Router Chassis (Hp)
• Jg362b Hp Hsr6804 Router Chassis (Hp)
• Jg363a Hp Hsr6808 Router Chassis (Hp)
• Jg363b Hp Hsr6808 Router Chassis (Hp)
• Jg364a Hp Hsr6800 Rse-x2 Router Main Processing Unit (Hp)
• Jg402a Hp Msr4080 Router Chassis (Hp)
• Jg403a Hp Msr4060 Router Chassis (Hp)
• Jg404a Hp Msr3064 Router (Hp)
• Jg405a Hp Msr3044 Router (Hp)
• Jg406a Hp Msr3024 Ac Router (Hp)
• Jg407a Hp Msr3024 Dc Router (Hp)
• Jg408a Hp Msr3024 Poe Router (Hp)
• Jg409a Hp Msr3012 Ac Router (Hp)
• Jg410a Hp Msr3012 Dc Router (Hp)
• Jg411a Hp Msr2003 Ac Router (Hp)
• Jg412a Hp Msr4000 Mpu-100 Main Processing Unit (Hp)
• Jg496a Hp 10500 Type A Mpu With Comware (Hp)
• Jg497a Hp 12500 Mpu W/comware (Hp)
• Jg555a Hp 5920af-24xg Taa Switch (Hp)
• Jg734a Hp Msr2004-24 Ac Router (Hp)
• Jg735a) Hp Msr2004-48 Router (Hp)
• Jg776a Hp Hsr6602-g Taa-compliant Router (Hp)
• Jg777a Hp Hsr6602-xg Taa-compliant Router (Hp)
• Jg779a Hp Hsr6800 Rse-x2 Router Taa-compliant Main Processing Unit (Hp)
• Jg782a Hp Ff 12508e Ac Switch Chassis (Hp)
• Jg783a Hp Ff 12508e Dc Switch Chassis (Hp)
• Jg784a Hp Ff 12518e Ac Switch Chassis (Hp)
• Jg785a Hp Ff 12518e Dc Switch Chassis (Hp)
• Jg786a Hp Flexfabric 12500 4-port 100gbe Cfp Fd (Hp)
• Jg787a Hp Flexfabric 12500 4-port 100gbe Cfp Fd Taa (Hp)
• Jg788a Hp Flexfabric 12500 4-port 100gbe Cfp Fg (Hp)
• Jg789a Hp Flexfabric 12500 4-port 100gbe Cfp Fg Taa (Hp)
• Jg798a Hp Flexfabric 12508e Fabric (Hp)
• Jg802a Hp Ff 12500e Mpu (Hp)
• Jg803a Hp Flexfabric 12500e Taa-compliant Main Processing Unit (Hp)
• Jg810aae Hp Vsr1001 Virtual Services Router 60 Day Evaluation (Hp)
• Jg811aae Hp Vsr1001 Comware 7 Virtual Services Router (Hp)
• Jg812aae Hp Vsr1004 Comware 7 Virtual Services Router (Hp)
• Jg813aae Hp Vsr1008 Comware 7 Virtual Services Router (Hp)
• Jg820a Hp 10504 Taa Switch Chassis (Hp)
• Jg821a Hp 10508 Taa Switch Chassis (Hp)
• Jg822a Hp 10508-v Taa Switch Chassis (Hp)
• Jg823a Hp 10512 Taa Switch Chassis (Hp)
• Jg834a Hp Flexfabric 12508e Ac Switch Taa-compliant Chassis (Hp)
• Jg835a Hp Flexfabric 12508e Dc Switch Taa-compliant Chassis (Hp)
• Jg836a Hp Flexfabric 12518e Ac Switch Taa-compliant Chassis (Hp)
• Jg837a Hp Flexfabric 12518e Dc Switch Taa-compliant Chassis (Hp)
• Jg861a Hp Msr3024 Taa-compliant Ac Router (Hp)
• Jg866a Hp Msr2003 Taa-compliant Ac Router (Hp)
• Jg869a Hp Msr4000 Taa-compliant Mpu-100 Main Processing Unit (Hp)
• Jg875a Hp Msr1002-4 Ac Router (Hp)
• Jh060a Hp Msr1003-8s Ac Router (Hp)
• Jh075a) Hp Hsr6800 Rse-x3 Router Main Processing Unit (Hp)
• Jh179a Hp Flexfabric 5930 4-slot Switch (Hp)
• Jh188a Hp Flexfabric 5930 4-slot Taa-compliant Switch (Hp)
• Jh192a Hp 10500 48-port Gig-t (rj45) Se (Hp)
• Jh196a Hp 10500 2-port 100gbe Cfp Ec (Hp)
• Jh198a Hp 10500 Type D Main Processing Unit With Comware (Hp)

References

• http://www.securityfocus.com/bid/79869
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492