4.9

CVE-2015-8086

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Quidway S5300 Firmware Version v200r001c00spc300
   Huawei ≫ Quidway S5300 Version -
Huawei ≫ Quidway S9300 Firmware Version v200r001c00spc300
   Huawei ≫ Quidway S9300 Version -
Huawei ≫ Quidway S9300 Firmware Version v200r002c00spc100
   Huawei ≫ Quidway S9300 Version -
Huawei ≫ Quidway S9300 Firmware Version v200r003c00spc500
   Huawei ≫ Quidway S9300 Version -
Huawei ≫ S5700 Firmware Version v200r001c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r002c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r003c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r006c00
   Huawei ≫ S5700 Version -
Huawei ≫ S12700 Firmware Version v200r005c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r006c00
   Huawei ≫ S12700 Version -
Huawei ≫ Ar Firmware Version v200r001
   Huawei ≫ Ar Version -
Huawei ≫ Ar Firmware Version v200r002
   Huawei ≫ Ar Version -
Huawei ≫ Ar Firmware Version v200r003
   Huawei ≫ Ar Version -
Huawei ≫ Ar Firmware Version v200r005c10
   Huawei ≫ Ar Version -
Huawei ≫ Ar Firmware Version v200r005c20
   Huawei ≫ Ar Version -
Huawei ≫ Ar Firmware Version v200r005c30
   Huawei ≫ Ar Version -
Huawei ≫ S5300 Firmware Version v200r002c00
   Huawei ≫ S5300 Version -
Huawei ≫ S5300 Firmware Version v200r005c00spc500
   Huawei ≫ S5300 Version -
Huawei ≫ S5300 Firmware Version v200r006c00spc500
   Huawei ≫ S5300 Version -
Huawei ≫ S9300 Firmware Version v200r005c00spc300
   Huawei ≫ S9300 Version -
Huawei ≫ S9300 Firmware Version v200r006c00spc500
   Huawei ≫ S9300 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.276
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 1.2 3.6
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

http://www.huawei.com/en/psirt/security-advisories/hw-455876
Vendor Advisory
http://www.securityfocus.com/bid/76897