Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-2800

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Published

2017-06-08T16:29:00.403

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei s5700_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s5700 - No
Operating System huawei s5300_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s5300 - No
Operating System huawei s6300_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s6300 - No
Operating System huawei s6700_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s6700 - No
Operating System huawei s7700_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s7700 - No
Operating System huawei s9300_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s9300 - No
Operating System huawei s9700_firmware ≤ v200r001c00spc300 Yes
Hardware huawei campus_s9700 - No
References