First published: Thu Nov 19 2015(Updated: )
The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei eSpace firmware | <=v100r001c20 | |
Huawei eSpace unified gateway U1910 | ||
Huawei eSpace unified gateway U1911 | ||
Huawei eSpace unified gateway U1930 | ||
Huawei eSpace unified gateway U1960 | ||
Huawei eSpace unified gateway U1980 | ||
Huawei eSpace unified gateway U1981 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-7845 is considered a medium severity vulnerability due to its potential to cause a denial of service.
To address CVE-2015-7845, users should upgrade their Huawei eSpace firmware to a version later than V100R001C20SPH605.
CVE-2015-7845 affects Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways running affected firmware versions.
Exploiting CVE-2015-7845 allows remote attackers to send crafted SSH packets leading to an outage of the command-line interface.
No specific workaround is recommended for CVE-2015-7845; upgrading to a secure firmware version is the only solution.