CVE-2015-1460: High severity HUAWEI Quidway Firmware vulnerability
Published Feb 3, 2015
·Updated
Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet.
Affected Software
10 affected components
HUAWEI Quidway Firmware<=v200r003c00spc300
HUAWEI Quidway S2350
HUAWEI Quidway S2750
huawei Quidway S5300
HUAWEI Quidway S5700
HUAWEI Quidway S6300
HUAWEI Quidway S6700
HUAWEI Quidway S7700
HUAWEI Quidway S9300
HUAWEI Quidway S9700
Event History
Feb 3, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1460?
CVE-2015-1460 has a high severity rating due to its potential for remote privilege escalation.
2
How do I fix CVE-2015-1460?
To mitigate CVE-2015-1460, upgrade Huawei Quidway firmware to version V200R005C00SPC300 or later.
3
Who is affected by CVE-2015-1460?
CVE-2015-1460 affects Huawei Quidway switches running firmware versions before V200R005C00SPC300.
4
What type of attack does CVE-2015-1460 enable?
CVE-2015-1460 enables remote attackers to gain elevated privileges through crafted packets.
5
Is there a workaround for CVE-2015-1460?
There are no specific workarounds for CVE-2015-1460; updating the firmware is the recommended solution.