CVE-2015-8676

CWE-119 — Buffer OverflowCWE-3993 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 48.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Huawei S2300 FirmwareHuawei S2350ei FirmwareHuawei S3300 Firmware+8 more
Timeline
PublishedApr 14
Latest updateMay 14

Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote …

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages11 packages

▶NVDhuawei/s2300_firmwarev100r006c05 — v100r006sph022
▶NVDhuawei/s3300_firmwarev100r006c05 — v100r006sph022
▶NVDhuawei/s7700_firmwarev200r001c00 — v200r001sph023+2
▶NVDhuawei/s9300_firmwarev200r001c00 — v200r001sph023+2
▶NVDhuawei/s9700_firmwarev200r001c00 — v200r001sph023+2

🔴Vulnerability Details

2
GHSA
GHSA-hv98-6974-7f6f: Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018,↗2022-05-14
▶
CVEList
CVE-2015-8676: Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018,↗2016-04-14
▶
CVE-2015-8676 (HIGH CVSS 7.5) | Memory leak in Huawei S5300EI | cvebase.io