6.8

CVE-2017-15315

Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Nip6300 Firmware Version v500r001c20spc100
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c20spc200
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c20spc100
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c20spc200
   Huawei ≫ Nip6600 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c20spc100
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c20spc200
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c20spc100
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c20spc200
   Huawei ≫ Secospace Usg6500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.529
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 6.8 8 6.9
AV:N/AC:L/Au:S/C:N/I:N/A:C
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en
Vendor Advisory