CVE-2015-3913

High

Description

The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.

SeverityHigh
CVSS7.5
Exploit probability—
ProductHuawei S2300 Firmware
PublishedJun 8, 2017
First seenJun 8, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
huawei s2300_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s2700_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s3300_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s3700_firmwarev100r006c00, v100r006c03, v100r006c05—
huawei s5300ei_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700ei_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300si_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700si_firmwarev100r006c00, v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5700hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s6300ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s6700ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5710hi_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300—
huawei s5300li_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s5700li_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s2350ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s2750ei_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc300, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s5720hi_firmwarev200r006c00spc500, v200r007c00spc500—
huawei s7700_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s9300_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s9700_firmwarev200r001c00spc300, v200r002c00spc300, v200r003c00spc500, v200r005c00spc300, v200r006c00spc500, v200r007c00spc500—
huawei s12700_firmwarev200r005c00spc300, v200r006c00spc500, v200r007c00spc500—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2015-3913 · Huawei S2300 Firmware · Dark Radar