CVE-2015-8084

EPSS 0.36%
Published 07.12.2015 20:59:10
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Unified Security Gateway Firmware Version <= v300r001c10

   Huawei ≫ Usg2100
   Huawei ≫ Usg2200
   Huawei ≫ Usg5100
   Huawei ≫ Usg5500

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.36%	0.55

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/77300

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457916.htm

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-8084

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-8084

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-8084

EUVD