First published: Thu Jun 08 2017(Updated: )
The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Campus S5700 firmware | <=v200r001c00spc300 | |
Huawei S5700HI | ||
Huawei 5300HI firmware | <=v200r001c00spc300 | |
Huawei Campus S5300 | ||
Huawei S6300EI firmware | <=v200r001c00spc300 | |
Huawei Campus S6300 | ||
Huawei S6700EI Firmware | <=v200r001c00spc300 | |
Huawei S6700 | ||
Huawei Campus S7700 firmware | <=v200r001c00spc300 | |
Huawei Campus S7700 firmware | ||
Huawei Campus S9300 Firmware | <=v200r001c00spc300 | |
Huawei Campus S9300 Firmware | ||
Huawei LSW S9700 firmware | <=v200r001c00spc300 | |
Huawei Campus LSW S9700 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-2800 is classified as a denial of service vulnerability that causes device restarts.
To mitigate CVE-2015-2800, upgrade your Huawei Campus switch firmware to a version that is V200R001SPH012 or later for affected models.
CVE-2015-2800 affects the Huawei S5700, S5300, S6300, S6700, S7700, S9300, and S9700 models with specific firmware versions before updates.
CVE-2015-2800 can be exploited by remote attackers through vulnerabilities in the user authentication module.
There are no effective workarounds for CVE-2015-2800; the recommended solution is to upgrade the firmware.