Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."

Published

2016-01-05T11:59:00.097

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fd - Yes
Application hp jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taa - Yes
Application hp jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fg - Yes
Application hp jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taa - Yes
Application hp jg798a_hp_flexfabric_12508e_fabric - Yes
Application hp jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluation - Yes
Application hp jh192a_hp_10500_48-port_gig-t_\(rj45\)_se - Yes
Application hp jh196a_hp_10500_2-port_100gbe_cfp_ec - Yes
Hardware hp jc072b_hp_12500_main_processing_unit - Yes
Hardware hp jc085a_hp_a12518_switch_chassis - Yes
Hardware hp jc086a_hp_a12508_switch_chassis - Yes
Hardware hp jc124a_hp_a9508_switch_chassis - Yes
Hardware hp jc124b_hp_9505_switch_chassis - Yes
Hardware hp jc125a_hp_a9512_switch_chassis - Yes
Hardware hp jc125b_hp_9512_switch_chassis - Yes
Hardware hp jc474a_hp_a9508-v_switch_chassis - Yes
Hardware hp jc474b_hp_9508-v_switch_chassis - Yes
Hardware hp jc611a_hp_10508-v_switch_chassis - Yes
Hardware hp jc612a_hp_10508_switch_chassis - Yes
Hardware hp jc613a_hp_10504_switch_chassis - Yes
Hardware hp jc652a_hp_12508_dc_switch_chassis - Yes
Hardware hp jc653a_hp_12518_dc_switch_chassis - Yes
Hardware hp jc654a_hp_12504_ac_switch_chassis - Yes
Hardware hp jc655a_hp_12504_dc_switch_chassis - Yes
Hardware hp jc748a_hp_10512_switch_chassis - Yes
Hardware hp jc808a_hp_12500_taa_main_processing_unit - Yes
Hardware hp jf430a_hp_a12518_switch_chassis - Yes
Hardware hp jf430b_hp_12518_switch_chassis - Yes
Hardware hp jf430c_hp_12518_ac_switch_chassis - Yes
Hardware hp jf431a_hp_a12508_switch_chassis - Yes
Hardware hp jf431b_hp_12508_switch_chassis - Yes
Hardware hp jf431c_hp_12508_ac_switch_chassis - Yes
Hardware hp jg296a_hp_5920af-24xg_switch - Yes
Hardware hp jg353a_hp_hsr6602-g_router - Yes
Hardware hp jg354a_hp_hsr6602-xg_router - Yes
Hardware hp jg361a_hp_hsr6802_router_chassis - Yes
Hardware hp jg361b_hp_hsr6802_router_chassis - Yes
Hardware hp jg362a_hp_hsr6804_router_chassis - Yes
Hardware hp jg362b_hp_hsr6804_router_chassis - Yes
Hardware hp jg363a_hp_hsr6808_router_chassis - Yes
Hardware hp jg363b_hp_hsr6808_router_chassis - Yes
Hardware hp jg364a_hp_hsr6800_rse-x2_router_main_processing_unit - Yes
Hardware hp jg402a_hp_msr4080_router_chassis - Yes
Hardware hp jg403a_hp_msr4060_router_chassis - Yes
Hardware hp jg404a_hp_msr3064_router - Yes
Hardware hp jg405a_hp_msr3044_router - Yes
Hardware hp jg406a_hp_msr3024_ac_router - Yes
Hardware hp jg407a_hp_msr3024_dc_router - Yes
Hardware hp jg408a_hp_msr3024_poe_router - Yes
Hardware hp jg409a_hp_msr3012_ac_router - Yes
Hardware hp jg410a_hp_msr3012_dc_router - Yes
Hardware hp jg411a_hp_msr2003_ac_router - Yes
Hardware hp jg412a_hp_msr4000_mpu-100_main_processing_unit - Yes
Hardware hp jg555a_hp_5920af-24xg_taa_switch - Yes
Hardware hp jg734a_hp_msr2004-24_ac_router - Yes
Hardware hp jg735a\)_hp_msr2004-48_router - Yes
Hardware hp jg776a_hp_hsr6602-g_taa-compliant_router - Yes
Hardware hp jg777a_hp_hsr6602-xg_taa-compliant_router - Yes
Hardware hp jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unit - Yes
Hardware hp jg782a_hp_ff_12508e_ac_switch_chassis - Yes
Hardware hp jg783a_hp_ff_12508e_dc_switch_chassis - Yes
Hardware hp jg784a_hp_ff_12518e_ac_switch_chassis - Yes
Hardware hp jg785a_hp_ff_12518e_dc_switch_chassis - Yes
Hardware hp jg802a_hp_ff_12500e_mpu - Yes
Hardware hp jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unit - Yes
Hardware hp jg811aae_hp_vsr1001_comware_7_virtual_services_router - Yes
Hardware hp jg812aae_hp_vsr1004_comware_7_virtual_services_router - Yes
Hardware hp jg813aae_hp_vsr1008_comware_7_virtual_services_router - Yes
Hardware hp jg820a_hp_10504_taa_switch_chassis - Yes
Hardware hp jg821a_hp_10508_taa_switch_chassis - Yes
Hardware hp jg822a_hp_10508-v_taa_switch_chassis - Yes
Hardware hp jg823a_hp_10512_taa_switch_chassis - Yes
Hardware hp jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis - Yes
Hardware hp jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassis - Yes
Hardware hp jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassis - Yes
Hardware hp jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassis - Yes
Hardware hp jg861a_hp_msr3024_taa-compliant_ac_router - Yes
Hardware hp jg866a_hp_msr2003_taa-compliant_ac_router - Yes
Hardware hp jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unit - Yes
Hardware hp jg875a_hp_msr1002-4_ac_router - Yes
Hardware hp jh060a_hp_msr1003-8s_ac_router - Yes
Hardware hp jh075a\)_hp_hsr6800_rse-x3_router_main_processing_unit - Yes
Hardware hp jh179a_hp_flexfabric_5930_4-slot_switch - Yes
Hardware hp jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switch - Yes
Operating System hp jg496a_hp_10500_type_a_mpu_with_comware 7.0 Yes
Operating System hp jg497a_hp_12500_mpu_w\/comware 7.0 Yes
Operating System hp jh198a_hp_10500_type_d_main_processing_unit_with_comware 7.0 Yes
References