CVE-2015-8229: Input Validation

Q: What is the severity of CVE-2015-8229?

CVE-2015-8229 has a medium severity rating as it allows remote authenticated users to cause a denial of service.

Q: How do I fix CVE-2015-8229?

To fix CVE-2015-8229, upgrade the Huawei eSpace U2980 gateway to software version V100R001C10 or later, and the U2990 to V200R001C10 or later.

Q: Who is affected by CVE-2015-8229?

CVE-2015-8229 affects Huawei eSpace U2980 and U2990 gateways running software versions prior to V100R001C10 and V200R001C10, respectively.

Q: What is the impact of CVE-2015-8229?

The impact of CVE-2015-8229 is a denial of service condition that can be triggered by crafted signaling packets from a registered device.

Q: Can CVE-2015-8229 be exploited remotely?

Yes, CVE-2015-8229 can be exploited remotely by authenticated users who send crafted signaling packets.

Published Nov 24, 2015

Updated

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered device.

Affected Software

4 affected components

huawei Espace Firmware<=v100r001c02

huawei Espace Unified Gateway U2980

huawei Espace Firmware<=v200r001c02

huawei Espace Unified Gateway U2990

Remediation

Patch Available

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461219.htm

Event History

Nov 24, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8229?

CVE-2015-8229 has a medium severity rating as it allows remote authenticated users to cause a denial of service.

How do I fix CVE-2015-8229?

To fix CVE-2015-8229, upgrade the Huawei eSpace U2980 gateway to software version V100R001C10 or later, and the U2990 to V200R001C10 or later.

Who is affected by CVE-2015-8229?