CVE-2015-8677

CWE-3993 documents3 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 52.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
Huawei S2300 FirmwareHuawei S2350ei FirmwareHuawei S3300 Firmware+10 more
Timeline
PublishedApr 14
Latest updateMay 14

Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006S…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages13 packages

▶NVDhuawei/s2300_firmwarev100r006c05 — v100r006sph022
▶NVDhuawei/s3300_firmwarev100r006c05 — v100r006sph022
▶NVDhuawei/s7700_firmwarev200r003c00 — v200r003sph011+2
▶NVDhuawei/s9300_firmwarev200r003c00 — v200r003sph011+2
▶NVDhuawei/s9700_firmwarev200r003c00 — v200r003sph011+2

🔴Vulnerability Details

2
GHSA
GHSA-m83m-mp3r-h4c3: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 be↗2022-05-14
▶
CVEList
CVE-2015-8677: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 be↗2016-04-14
▶
CVE-2015-8677 (MEDIUM CVSS 6.5) | Memory leak in Huawei S5300EI | cvebase.io