← Back

CVE-2015-2800

nvd nist
Published: Jun 8, 2017Modified: May 13, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected (7)

Huawei
7 products
S5700 Firmware
S5300 Firmware
S6300 Firmware
S6700 Firmware
S7700 Firmware
S9300 Firmware
S9700 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S5700 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S5700
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S5300 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S5300
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S6300 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S6300
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S6700 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S6700
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S7700 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S7700
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S9300 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S9300
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S9700 Firmware
Up to v200r001c00spc300
Running on/withPlatform Versions
Huawei
Campus S9700
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

Source: cve@mitre.org
Third Party AdvisoryVendor Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.