CVE-2015-8083: Buffer Overflow
First published: Thu Nov 19 2015(Updated: )
An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei eSpace firmware | <=v100r001c20 | |
| Huawei eSpace U1910 | ||
| Huawei eSpace U1911 | ||
| Huawei eSpace Unified Gateway U1930 | ||
| Huawei eSpace U1960 | ||
| Huawei eSpace Unified Gateway U1980 | ||
| Huawei eSpace U1981 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-8083?
CVE-2015-8083 is classified as a denial of service vulnerability due to improper memory initialization allowing remote attackers to disrupt service.
How do I fix CVE-2015-8083?
To mitigate CVE-2015-8083, upgrade the firmware of the affected Huawei eSpace devices to version V200R003C00SPC300 or later.
Which Huawei devices are affected by CVE-2015-8083?
CVE-2015-8083 affects Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways running firmware before V200R003C00SPC300.
What is the attack vector for CVE-2015-8083?
The attack vector for CVE-2015-8083 is remote, allowing attackers to exploit the vulnerability without physical access to the device.
What are the potential impacts of CVE-2015-8083?
The potential impact of CVE-2015-8083 includes unauthorized denial of service, resulting in interrupted access to the affected eSpace gateways.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei espace firmware
- version/huawei espace firmware/v100r001c20
- canonical/huawei espace u1910
- canonical/huawei espace u1911
- canonical/huawei espace unified gateway u1930
- canonical/huawei espace u1960
- canonical/huawei espace unified gateway u1980
- canonical/huawei espace u1981