CVE-2015-8677

published 2016-04-14

CVE-2015-8677: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before…

Priority P4 28 medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C N I N A H

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

Affected

27 ranges · showing 25

Vendor	Product	Version range	Fixed in
huawei	s2300_firmware	>= v100r006c05 < v100r006sph022	v100r006sph022
huawei	s2350ei_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011
huawei	s2350ei_firmware	>= v200r005c00 < v200r005sph008	v200r005sph008
huawei	s2350ei_firmware	>= v200r006c00 < v200r006sph002	v200r006sph002
huawei	s3300_firmware	>= v100r006c05 < v100r006sph022	v100r006sph022
huawei	s5300ei_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011
huawei	s5300ei_firmware	>= v200r005c00 < v200r005sph008	v200r005sph008
huawei	s5300li_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011
huawei	s5300li_firmware	>= v200r005c00 < v200r005sph008	v200r005sph008
huawei	s5300li_firmware	>= v200r006c00 < v200r006sph002	v200r006sph002
huawei	s5300si_firmware	>= v200r001c00 < v200r001sph018	v200r001sph018
huawei	s5300si_firmware	>= v200r002c00 < v200r003sph011	v200r003sph011
huawei	s5310hi_firmware	>= v200r001c00 < v200r001sph018	v200r001sph018
huawei	s5310hi_firmware	>= v200r002c00 < v200r003sph011	v200r003sph011
huawei	s5720ei_firmware	>= v200r006c00 < v200r006sph002	v200r006sph002
huawei	s5720hi_firmware	>= v200r006c00 < v200r006sph002	v200r006sph002
huawei	s6300ei_firmware	>= v200r001c00 < v200r001sph018	v200r001sph018
huawei	s6300ei_firmware	>= v200r002c00 < v200r003sph011	v200r003sph011
huawei	s7700_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011
huawei	s7700_firmware	>= v200r005c00 < v200r005sph009	v200r005sph009
huawei	s7700_firmware	>= v200r006c00 < v200r006sph003	v200r006sph003
huawei	s9300_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011
huawei	s9300_firmware	>= v200r005c00 < v200r005sph009	v200r005sph009
huawei	s9300_firmware	>= v200r006c00 < v200r006sph003	v200r006sph003
huawei	s9700_firmware	>= v200r003c00 < v200r003sph011	v200r003sph011

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399