CVE-2015-7842

EPSS 0.74%
Veröffentlicht 10.10.2017 01:30:20
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allow remote authenticated operators to change server information by leveraging failure to verify user permissions.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 10 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Rh2288 V3 Firmware Version <= v100r003c00

Huawei ≫ Rh2288 V3 Version -

Huawei ≫ Rh2288h V3 Firmware Version <= v100r003c00

Huawei ≫ Rh2288h V3 Version -

Huawei ≫ Xh628 V3 Firmware Version <= v100r003c00

Huawei ≫ Xh628 V3 Version -

Huawei ≫ Rh1288 V3 Firmware Version <= v100r003c00spc100

Huawei ≫ Rh1288 V3 Version -

Huawei ≫ Rh2288a V2 Firmware Version <= v100r002c00

Huawei ≫ Rh2288a V2 Version -

Huawei ≫ Rh1288a V2 Firmware Version <= v100r002c00

Huawei ≫ Rh1288a V2 Version -

Huawei ≫ Rh8100 V3 Firmware Version <= v100r003c00

Huawei ≫ Rh8100 V3 Version -

Huawei ≫ Ch222 V3 Firmware Version <= v100r001c00

Huawei ≫ Ch222 V3 Version -

Huawei ≫ Ch220 V3 Firmware Version <= v100r001c00

Huawei ≫ Ch220 V3 Version -

Huawei ≫ Ch121 V3 Firmware Version <= v100r001c00

Huawei ≫ Ch121 V3 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.74%	0.499

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.1	2.8	4.2	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
NIST	5.5	8	4.9	AV:N/AC:L/Au:S/C:N/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/bid/76836

Third Party Advisory

VDB Entry

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-7842

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-7842

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-7842

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-7842