CVE-2015-5434

Medium

Description

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."

SeverityMedium
CVSS6.5
Exploit probability—
ProductJg786a Hp Flexfabric 12500 4-port 100gbe Cfp Fd
PublishedJan 5, 2016
First seenJan 5, 2016

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
hp jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fdNo range specified—
hp jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taaNo range specified—
hp jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fgNo range specified—
hp jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taaNo range specified—
hp jg798a_hp_flexfabric_12508e_fabricNo range specified—
hp jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluationNo range specified—
hp jh192a_hp_10500_48-port_gig-t_\(rj45\)_seNo range specified—
hp jh196a_hp_10500_2-port_100gbe_cfp_ecNo range specified—
hp jc072b_hp_12500_main_processing_unitNo range specified—
hp jc085a_hp_a12518_switch_chassisNo range specified—
hp jc086a_hp_a12508_switch_chassisNo range specified—
hp jc124a_hp_a9508_switch_chassisNo range specified—
hp jc124b_hp_9505_switch_chassisNo range specified—
hp jc125a_hp_a9512_switch_chassisNo range specified—
hp jc125b_hp_9512_switch_chassisNo range specified—
hp jc474a_hp_a9508-v_switch_chassisNo range specified—
hp jc474b_hp_9508-v_switch_chassisNo range specified—
hp jc611a_hp_10508-v_switch_chassisNo range specified—
hp jc612a_hp_10508_switch_chassisNo range specified—
hp jc613a_hp_10504_switch_chassisNo range specified—
hp jc652a_hp_12508_dc_switch_chassisNo range specified—
hp jc653a_hp_12518_dc_switch_chassisNo range specified—
hp jc654a_hp_12504_ac_switch_chassisNo range specified—
hp jc655a_hp_12504_dc_switch_chassisNo range specified—
hp jc748a_hp_10512_switch_chassisNo range specified—
hp jc808a_hp_12500_taa_main_processing_unitNo range specified—
hp jf430a_hp_a12518_switch_chassisNo range specified—
hp jf430b_hp_12518_switch_chassisNo range specified—
hp jf430c_hp_12518_ac_switch_chassisNo range specified—
hp jf431a_hp_a12508_switch_chassisNo range specified—
hp jf431b_hp_12508_switch_chassisNo range specified—
hp jf431c_hp_12508_ac_switch_chassisNo range specified—
hp jg296a_hp_5920af-24xg_switchNo range specified—
hp jg353a_hp_hsr6602-g_routerNo range specified—
hp jg354a_hp_hsr6602-xg_routerNo range specified—
hp jg361a_hp_hsr6802_router_chassisNo range specified—
hp jg361b_hp_hsr6802_router_chassisNo range specified—
hp jg362a_hp_hsr6804_router_chassisNo range specified—
hp jg362b_hp_hsr6804_router_chassisNo range specified—
hp jg363a_hp_hsr6808_router_chassisNo range specified—
hp jg363b_hp_hsr6808_router_chassisNo range specified—
hp jg364a_hp_hsr6800_rse-x2_router_main_processing_unitNo range specified—
hp jg402a_hp_msr4080_router_chassisNo range specified—
hp jg403a_hp_msr4060_router_chassisNo range specified—
hp jg404a_hp_msr3064_routerNo range specified—
hp jg405a_hp_msr3044_routerNo range specified—
hp jg406a_hp_msr3024_ac_routerNo range specified—
hp jg407a_hp_msr3024_dc_routerNo range specified—
hp jg408a_hp_msr3024_poe_routerNo range specified—
hp jg409a_hp_msr3012_ac_routerNo range specified—
hp jg410a_hp_msr3012_dc_routerNo range specified—
hp jg411a_hp_msr2003_ac_routerNo range specified—
hp jg412a_hp_msr4000_mpu-100_main_processing_unitNo range specified—
hp jg555a_hp_5920af-24xg_taa_switchNo range specified—
hp jg734a_hp_msr2004-24_ac_routerNo range specified—
hp jg735a\)_hp_msr2004-48_routerNo range specified—
hp jg776a_hp_hsr6602-g_taa-compliant_routerNo range specified—
hp jg777a_hp_hsr6602-xg_taa-compliant_routerNo range specified—
hp jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unitNo range specified—
hp jg782a_hp_ff_12508e_ac_switch_chassisNo range specified—
hp jg783a_hp_ff_12508e_dc_switch_chassisNo range specified—
hp jg784a_hp_ff_12518e_ac_switch_chassisNo range specified—
hp jg785a_hp_ff_12518e_dc_switch_chassisNo range specified—
hp jg802a_hp_ff_12500e_mpuNo range specified—
hp jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unitNo range specified—
hp jg811aae_hp_vsr1001_comware_7_virtual_services_routerNo range specified—
hp jg812aae_hp_vsr1004_comware_7_virtual_services_routerNo range specified—
hp jg813aae_hp_vsr1008_comware_7_virtual_services_routerNo range specified—
hp jg820a_hp_10504_taa_switch_chassisNo range specified—
hp jg821a_hp_10508_taa_switch_chassisNo range specified—
hp jg822a_hp_10508-v_taa_switch_chassisNo range specified—
hp jg823a_hp_10512_taa_switch_chassisNo range specified—
hp jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassisNo range specified—
hp jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassisNo range specified—
hp jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassisNo range specified—
hp jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassisNo range specified—
hp jg861a_hp_msr3024_taa-compliant_ac_routerNo range specified—
hp jg866a_hp_msr2003_taa-compliant_ac_routerNo range specified—
hp jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unitNo range specified—
hp jg875a_hp_msr1002-4_ac_routerNo range specified—
hp jh060a_hp_msr1003-8s_ac_routerNo range specified—
hp jh075a\)_hp_hsr6800_rse-x3_router_main_processing_unitNo range specified—
hp jh179a_hp_flexfabric_5930_4-slot_switchNo range specified—
hp jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switchNo range specified—
hp jg496a_hp_10500_type_a_mpu_with_comware7.0—
hp jg497a_hp_12500_mpu_w\/comware7.0—
hp jh198a_hp_10500_type_d_main_processing_unit_with_comware7.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.