CVE Feed

    Dashboard / CVE / CVE-2015-8677

    CVE-2015-8677

    Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

    Published:Apr 14, 2016
    Last Modified:Apr 12, 2025
    EPS:Apr 14, 2016
    EPSS Score:0.00242
    CVSS Score:6.5

    Affected Products

    Vendor
    Huawei
    Product
    S2300
    Vendor
    Huawei
    Product
    S2300 Firmware
    Vendor
    Huawei
    Product
    S2350ei
    Vendor
    Huawei
    Product
    S2350ei Firmware
    Vendor
    Huawei
    Product
    S3300
    Vendor
    Huawei
    Product
    S3300 Firmware
    Vendor
    Huawei
    Product
    S5300ei
    Vendor
    Huawei
    Product
    S5300ei Firmware
    Vendor
    Huawei
    Product
    S5300li
    Vendor
    Huawei
    Product
    S5300li Firmware
    Vendor
    Huawei
    Product
    S5300si
    Vendor
    Huawei
    Product
    S5300si Firmware
    Vendor
    Huawei
    Product
    S5310hi
    Vendor
    Huawei
    Product
    S5310hi Firmware
    Vendor
    Huawei
    Product
    S5720ei
    Vendor
    Huawei
    Product
    S5720ei Firmware
    Vendor
    Huawei
    Product
    S5720hi
    Vendor
    Huawei
    Product
    S5720hi Firmware
    Vendor
    Huawei
    Product
    S6300ei
    Vendor
    Huawei
    Product
    S6300ei Firmware
    Vendor
    Huawei
    Product
    S7700
    Vendor
    Huawei
    Product
    S7700 Firmware
    Vendor
    Huawei
    Product
    S9300
    Vendor
    Huawei
    Product
    S9300 Firmware
    Vendor
    Huawei
    Product
    S9700
    Vendor
    Huawei
    Product
    S9700 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-5285 (CVSS 7.5) — Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted pa…
    CVE-2017-17165 (CVSS 7.5) — IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R0…
    CVE-2014-5394 (CVSS 5.9) — Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH…
    CVE-2017-8147 (CVSS 7.5) — AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T,…
    CVE-2015-3913 (CVSS 7.5) — The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of servi…
    CVE-2014-8572 (CVSS 7.5) — Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU …
    CVE-2014-3223 (CVSS 7.5) — Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH0…
    CVE-2015-8676 (CVSS 7.5) — Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with sof…
    CVE-2012-6571 (CVSS 7.5) — The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Hu…
    CVE-2012-6569 (CVSS 9.3) — Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High