CVE-2015-7846 : Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows at

Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.

Published 2017-09-25 21:29:01

Updated 2017-10-10 12:26:22

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2015-7846

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 20 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-7846

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.6	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2015-7846

http://www.securityfocus.com/bid/76173

Multiple Huawei Products CF Card Local Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm

Security Advisory - CF Card Information Leak Vulnerability on Multiple Huawei Products
Vendor Advisory

Products affected by CVE-2015-7846

Huawei » S7700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r002c00spc100
cpe:2.3:o:huawei:s7700_firmware:v200r002c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s7700_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r005c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r005c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r006c00spc500
cpe:2.3:o:huawei:s7700_firmware:v200r006c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r006c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r006c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r002c00spc100
cpe:2.3:o:huawei:s9700_firmware:v200r002c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s9700_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r006c00spc500
cpe:2.3:o:huawei:s9700_firmware:v200r006c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r005c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r005c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r006c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r006c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9300 Firmware » Version: V200r002c00spc100
cpe:2.3:o:huawei:s9300_firmware:v200r002c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r006c00spc500
cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r005c00spc300
cpe:2.3:o:huawei:s9300_firmware:v200r005c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r006c00spc300
cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc300
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc100
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c00spc200
cpe:2.3:o:huawei:ar3200_firmware:v200r003c00spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c00spc100
cpe:2.3:o:huawei:ar3200_firmware:v200r003c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc900
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc900:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc200
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc600
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc600:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc500
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar3200 Firmware » Version: V200r003c01spc800
cpe:2.3:o:huawei:ar3200_firmware:v200r003c01spc800:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar3200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc900
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc900:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc300
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc100
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c00spc200
cpe:2.3:o:huawei:ar200_firmware:v200r003c00spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c00spc100
cpe:2.3:o:huawei:ar200_firmware:v200r003c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc500
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc600
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc600:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc800
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc800:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar200 Firmware » Version: V200r003c01spc200
cpe:2.3:o:huawei:ar200_firmware:v200r003c01spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c00spc200
cpe:2.3:o:huawei:ar1200_firmware:v200r003c00spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc900
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc900:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc300
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc100
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c00spc100
cpe:2.3:o:huawei:ar1200_firmware:v200r003c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc200
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc500
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc800
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc800:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar1200 Firmware » Version: V200r003c01spc600
cpe:2.3:o:huawei:ar1200_firmware:v200r003c01spc600:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar1200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc300
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c00spc200
cpe:2.3:o:huawei:ar2200_firmware:v200r003c00spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c00spc100
cpe:2.3:o:huawei:ar2200_firmware:v200r003c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc900
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc900:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc100
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc500
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc600
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc600:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc800
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc800:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A
Huawei » Ar2200 Firmware » Version: V200r003c01spc200
cpe:2.3:o:huawei:ar2200_firmware:v200r003c01spc200:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ar2200 » Version: N/A

Vulnerability Details : CVE-2015-7846

Exploit prediction scoring system (EPSS) score for CVE-2015-7846

CVSS scores for CVE-2015-7846

CWE ids for CVE-2015-7846

References for CVE-2015-7846

Products affected by CVE-2015-7846