CVE-2015-8086
Medium
Description
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
SeverityMedium
CVSS4.9
Exploit probability—
ProductHuawei Quidway S5300 Firmware
PublishedOct 3, 2016
First seenOct 3, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei quidway_s5300_firmware | v200r001c00spc300 | — |
| huawei quidway_s9300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 | — |
| huawei s5700_firmware | v200r001c00, v200r002c00, v200r003c00, v200r005c00, v200r006c00 | — |
| huawei s12700_firmware | v200r005c00, v200r006c00 | — |
| huawei ar_firmware | v200r001, v200r002, v200r003, v200r005c10, v200r005c20, v200r005c30 | — |
| huawei s5300_firmware | v200r002c00, v200r005c00spc500, v200r006c00spc500 | — |
| huawei s9300_firmware | v200r005c00spc300, v200r006c00spc500 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.