cbcvebase.
CVE-2015-2800
published 2017-06-08

CVE-2015-2800: The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with…

PriorityP338high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.74%
75.2th percentile
The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected

7 ranges
VendorProductVersion rangeFixed in
huaweis5300_firmware<= v200r001c00spc300—
huaweis5700_firmware<= v200r001c00spc300—
huaweis6300_firmware<= v200r001c00spc300—
huaweis6700_firmware<= v200r001c00spc300—
huaweis7700_firmware<= v200r001c00spc300—
huaweis9300_firmware<= v200r001c00spc300—
huaweis9700_firmware<= v200r001c00spc300—

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.