Threat Investigation
Request a demo

CVE-2015-8676

High

Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets.

SeverityHigh
CVSS7.5
Exploit probability—
ProductHuawei S2350ei Firmware
PublishedApr 14, 2016
First seenApr 14, 2016

How to fix

Update
  • huawei s2350ei_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s5300ei_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s5300si_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s5310hi_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s6300ei_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s5300li_firmwarev200r001sph018, v200r003sph011 or later
  • huawei s9300_firmwarev200r001sph023, v200r003c00 or later
  • huawei s7700_firmwarev200r001sph023, v200r003c00 or later
  • huawei s9700_firmwarev200r001sph023, v200r003c00 or later
  • huawei s2300_firmwarev100r006sph022 or later
  • huawei s3300_firmwarev100r006sph022 or later

Affected products

ProductAffected versionsFixed in
huawei s2350ei_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s5300ei_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s5300si_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s5310hi_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s6300ei_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s5300li_firmwarev200r001c00 ≤ v < v200r001sph018, v200r002c00 ≤ v < v200r003sph011v200r001sph018, v200r003sph011
huawei s9300_firmwarev200r001c00 ≤ v < v200r001sph023, v200r002c00 ≤ v < v200r003c00, v200r003c00v200r001sph023, v200r003c00
huawei s7700_firmwarev200r001c00 ≤ v < v200r001sph023, v200r002c00 ≤ v < v200r003c00, v200r003c00v200r001sph023, v200r003c00
huawei s9700_firmwarev200r001c00 ≤ v < v200r001sph023, v200r002c00 ≤ v < v200r003c00, v200r003c00v200r001sph023, v200r003c00
huawei s2300_firmwarev100r006c05 ≤ v < v100r006sph022v100r006sph022
huawei s3300_firmwarev100r006c05 ≤ v < v100r006sph022v100r006sph022

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.