CVE-2015-7842

Published: Oct 10, 2017Modified: May 13, 2026

7.1

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Exploitability: 2.8 / Impact: 4.2

Source: NVD

Description

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allow remote authenticated operators to change server information by leveraging failure to verify user permissions.

Affected (10)

Products: Huawei: Rh2288 V3 Firmware, Rh2288h V3 Firmware, Xh628 V3 Firmware, Rh1288 V3 Firmware, Rh2288a V2 Firmware, Rh1288a V2 Firmware, Rh8100 V3 Firmware, Ch222 V3 Firmware, Ch220 V3 Firmware, Ch121 V3 Firmware

10 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh2288 V3 Firmware	Up to v100r003c00

Running on/with	Platform Versions
Huawei Rh2288 V3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh2288h V3 Firmware	Up to v100r003c00

Running on/with	Platform Versions
Huawei Rh2288h V3	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Xh628 V3 Firmware	Up to v100r003c00

Running on/with	Platform Versions
Huawei Xh628 V3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh1288 V3 Firmware	Up to v100r003c00spc100

Running on/with	Platform Versions
Huawei Rh1288 V3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh2288a V2 Firmware	Up to v100r002c00

Running on/with	Platform Versions
Huawei Rh2288a V2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh1288a V2 Firmware	Up to v100r002c00

Running on/with	Platform Versions
Huawei Rh1288a V2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Rh8100 V3 Firmware	Up to v100r003c00

Running on/with	Platform Versions
Huawei Rh8100 V3	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ch222 V3 Firmware	Up to v100r001c00

Running on/with	Platform Versions
Huawei Ch222 V3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ch220 V3 Firmware	Up to v100r001c00

Running on/with	Platform Versions
Huawei Ch220 V3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ch121 V3 Firmware	Up to v100r001c00

Running on/with	Platform Versions
Huawei Ch121 V3	All versions

Related CWEs

CWE-275

References (4)

http://www.securityfocus.com/bid/76836

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/76836

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.