First published: Tue Jan 12 2016(Updated: )
The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei TE60 Firmware | <=v100r001c10b022 | |
Huawei TE30 Firmware | ||
Huawei TE40 | ||
Huawei TE50 firmware | ||
Huawei TE60 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-8672 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To mitigate CVE-2015-8672, update the affected Huawei multimedia video conferencing endpoints to software version V100R001C10SPC100 or later.
CVE-2015-8672 affects the Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software versions prior to V100R001C10SPC100.
Yes, remote attackers can exploit CVE-2015-8672 to cause a denial of service without needing physical access to the device.
Using Huawei TE30, TE40, TE50, or TE60 devices without the recommended update makes them vulnerable to exploitation through CVE-2015-8672.