CVE-2015-3913

Yüksek

Açıklama

Birden fazla Huawei Campus serisi switch modelindeki IP yığını, uzaktan saldırganların özel olarak hazırlanmış bir ICMP istek mesajı aracılığıyla hizmet reddine (yeniden başlatma) neden olmasına izin verir.

ÖnemYüksek
CVSS7.5
İstismar olasılığı—
ÜrünHuawei S2300 Firmware
Yayın8 Haz 2017
İlk görülme8 Haz 2017

Nasıl düzeltilir

Kaynaklarda bu zafiyet için düzeltilmiş sürüm ya da yama bağlantısı yok.

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
huawei s2300_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s2700_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s3300_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s3700_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s5300ei_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700ei_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300si_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700si_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s6300ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s6700ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5710hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300li_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s5700li_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s2350ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s2750ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s5720hi_firmwarev200r006c00spc500, v200r007c00spc500—
huawei s7700_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s9300_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s9700_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s12700_firmwarev200r005c00spc300, v200r006c00spc500, v200r007c00spc500—

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2015-3913 · Huawei S2300 Firmware · Dark Radar