CVE-2015-3913: Input Validation
Published Jun 8, 2017
·Updated
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
Affected Software
121 affected components
Huawei S2300 Firmware=v100r006c00
Huawei S2300 Firmware=v100r006c03
Huawei S2300 Firmware=v100r006c05
Huawei S2300
Huawei S2700 Firmware=v100r006c00
Huawei S2700 Firmware=v100r006c03
Huawei S2700 Firmware=v100r006c05
Huawei S2700
Huawei S3300 Firmware=v100r006c00
Huawei S3300 Firmware=v100r006c03
Huawei S3300 Firmware=v100r006c05
Huawei S3300
Huawei S3700 Firmware=v100r006c00
Huawei S3700 Firmware=v100r006c03
Huawei S3700 Firmware=v100r006c05
Huawei S3700
Huawei S5300ei Firmware=v100r006c00
Huawei S5300ei Firmware=v200r001c00spc300
Huawei S5300ei Firmware=v200r002c00spc300
Huawei S5300ei Firmware=v200r003c00spc300
Huawei S5300ei Firmware=v200r005c00spc300
Huawei S5300EI
Huawei S5700ei Firmware=v100r006c00
Huawei S5700ei Firmware=v200r001c00spc300
Huawei S5700ei Firmware=v200r002c00spc300
Huawei S5700ei Firmware=v200r003c00spc300
Huawei S5700ei Firmware=v200r005c00spc300
Huawei S5700ei
Huawei S5300si Firmware=v100r006c00
Huawei S5300si Firmware=v200r001c00spc300
Huawei S5300si Firmware=v200r002c00spc300
Huawei S5300si Firmware=v200r003c00spc300
Huawei S5300si Firmware=v200r005c00spc300
Huawei S5300SI
Huawei S5700si Firmware=v100r006c00
Huawei S5700si Firmware=v200r001c00spc300
Huawei S5700si Firmware=v200r002c00spc300
Huawei S5700si Firmware=v200r003c00spc300
Huawei S5700si Firmware=v200r005c00spc300
Huawei S5700si
Huawei S5300hi Firmware=v200r001c00spc300
Huawei S5300hi Firmware=v200r002c00spc300
Huawei S5300hi Firmware=v200r003c00spc300
Huawei S5300hi Firmware=v200r005c00spc300
Huawei S5300HI
Huawei S5700hi Firmware=v200r001c00spc300
Huawei S5700hi Firmware=v200r002c00spc300
Huawei S5700hi Firmware=v200r003c00spc300
Huawei S5700hi Firmware=v200r005c00spc300
Huawei S5700hi
Huawei S6300ei Firmware=v200r001c00spc300
Huawei S6300ei Firmware=v200r002c00spc300
Huawei S6300ei Firmware=v200r003c00spc300
Huawei S6300ei Firmware=v200r005c00spc300
Huawei S6300EI
Huawei S6700ei Firmware=v200r001c00spc300
Huawei S6700ei Firmware=v200r002c00spc300
Huawei S6700ei Firmware=v200r003c00spc300
Huawei S6700ei Firmware=v200r005c00spc300
Huawei S6700ei
Huawei S5710hi Firmware=v200r001c00spc300
Huawei S5710hi Firmware=v200r002c00spc300
Huawei S5710hi Firmware=v200r003c00spc300
Huawei S5710hi Firmware=v200r005c00spc300
Huawei S5710hi
Huawei S5300li Firmware=v200r001c00spc300
Huawei S5300li Firmware=v200r002c00spc300
Huawei S5300li Firmware=v200r003c00spc300
Huawei S5300li Firmware=v200r005c00spc300
Huawei S5300li Firmware=v200r006c00spc500
Huawei S5300li Firmware=v200r007c00spc500
Huawei S5300LI
Huawei S5700li Firmware=v200r001c00spc300
Huawei S5700li Firmware=v200r002c00spc300
Huawei S5700li Firmware=v200r003c00spc300
Huawei S5700li Firmware=v200r005c00spc300
Huawei S5700li Firmware=v200r006c00spc500
Huawei S5700li Firmware=v200r007c00spc500
Huawei S5700li
Huawei S2350ei Firmware=v200r001c00spc300
Huawei S2350ei Firmware=v200r002c00spc300
Huawei S2350ei Firmware=v200r003c00spc300
Huawei S2350ei Firmware=v200r005c00spc300
Huawei S2350ei Firmware=v200r006c00spc500
Huawei S2350ei Firmware=v200r007c00spc500
Huawei S2350EI
Huawei S2750ei Firmware=v200r001c00spc300
Huawei S2750ei Firmware=v200r002c00spc300
Huawei S2750ei Firmware=v200r003c00spc300
Huawei S2750ei Firmware=v200r005c00spc300
Huawei S2750ei Firmware=v200r006c00spc500
Huawei S2750ei Firmware=v200r007c00spc500
Huawei S2750ei
Huawei S5720hi Firmware=v200r006c00spc500
Huawei S5720hi Firmware=v200r007c00spc500
Huawei S5720HI
Huawei S7700 Firmware=v200r001c00spc300
Huawei S7700 Firmware=v200r002c00spc300
Huawei S7700 Firmware=v200r003c00spc500
Huawei S7700 Firmware=v200r005c00spc300
Huawei S7700 Firmware=v200r006c00spc500
Huawei S7700 Firmware=v200r007c00spc500
Huawei S7700
Huawei S9300 Firmware=v200r001c00spc300
Huawei S9300 Firmware=v200r002c00spc300
Huawei S9300 Firmware=v200r003c00spc500
Huawei S9300 Firmware=v200r005c00spc300
Huawei S9300 Firmware=v200r006c00spc500
Huawei S9300 Firmware=v200r007c00spc500
Huawei S9300
Huawei S9700 Firmware=v200r001c00spc300
Huawei S9700 Firmware=v200r002c00spc300
Huawei S9700 Firmware=v200r003c00spc500
Huawei S9700 Firmware=v200r005c00spc300
Huawei S9700 Firmware=v200r006c00spc500
Huawei S9700 Firmware=v200r007c00spc500
Huawei S9700
Huawei S12700 Firmware=v200r005c00spc300
Huawei S12700 Firmware=v200r006c00spc500
Huawei S12700 Firmware=v200r007c00spc500
Huawei S12700
Event History
Jun 8, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3913?
CVE-2015-3913 has a high severity rating as it allows remote attackers to cause a denial of service by rebooting affected Huawei switches.
2
How do I fix CVE-2015-3913?
To fix CVE-2015-3913, upgrade to the patched firmware version provided by Huawei for the affected models.
3
Which Huawei devices are affected by CVE-2015-3913?
CVE-2015-3913 affects multiple models in the Huawei Campus series, including S2300, S2700, S3300, S3700, and others.
4
Can CVE-2015-3913 be exploited remotely?
Yes, CVE-2015-3913 can be exploited remotely via a crafted ICMP request message.
5
What impact does CVE-2015-3913 have on affected devices?
The impact of CVE-2015-3913 is the potential for a denial of service, causing the affected device to reboot and disrupt normal operations.