CVE-2015-8677 : Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switc

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

Published 2016-04-14 15:59:04

Updated 2019-06-20 14:26:28

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2015-8677

Huawei » S5300ei Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300ei » Version: N/A
Huawei » S5300ei Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph008
cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300ei » Version: N/A
Huawei » S5300si Firmware
Versions from including (>=) v200r001c00 and before (<) v200r001sph018
cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300si » Version: N/A
Huawei » S5300si Firmware
Versions from including (>=) v200r002c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300si » Version: N/A
Huawei » S5310hi Firmware
Versions from including (>=) v200r002c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5310hi » Version: N/A
Huawei » S5310hi Firmware
Versions from including (>=) v200r001c00 and before (<) v200r001sph018
cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5310hi » Version: N/A
Huawei » S6300ei Firmware
Versions from including (>=) v200r001c00 and before (<) v200r001sph018
cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6300ei » Version: N/A
Huawei » S6300ei Firmware
Versions from including (>=) v200r002c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6300ei » Version: N/A
Huawei » S2350ei Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph008
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2350ei » Version: N/A
Huawei » S2350ei Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph002
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2350ei » Version: N/A
Huawei » S2350ei Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2350ei » Version: N/A
Huawei » S5300li Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300li » Version: N/A
Huawei » S5300li Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph008
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300li » Version: N/A
Huawei » S5300li Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph002
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300li » Version: N/A
Huawei » S7700 Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph003
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph009
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S9700 Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph003
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph009
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9300 Firmware
Versions from including (>=) v200r005c00 and before (<) v200r005sph009
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware
Versions from including (>=) v200r003c00 and before (<) v200r003sph011
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph003
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S2300 Firmware
Versions from including (>=) v100r006c05 and before (<) v100r006sph022
cpe:2.3:o:huawei:s2300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2300 » Version: N/A
Huawei » S3300 Firmware
Versions from including (>=) v100r006c05 and before (<) v100r006sph022
cpe:2.3:o:huawei:s3300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S3300 » Version: N/A
Huawei » S5720ei Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph002
cpe:2.3:o:huawei:s5720ei_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5720ei » Version: N/A
Huawei » S5720hi Firmware
Versions from including (>=) v200r006c00 and before (<) v200r006sph002
cpe:2.3:o:huawei:s5720hi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5720hi » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2015-8677

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 47 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-8677

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:C	8.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2015-8677

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-8677

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en

Security Advisory - Memory Leak Vulnerability in Huawei Switches
Vendor Advisory

Jump to

Vulnerability Details : CVE-2015-8677

Products affected by CVE-2015-8677

Exploit prediction scoring system (EPSS) score for CVE-2015-8677

CVSS scores for CVE-2015-8677

CWE ids for CVE-2015-8677

References for CVE-2015-8677