What’s Vulnerable › Vulnerabilities

CVE-2015-2800

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-08 · updated 2026-06-17
• Weakness: CWE-287

Description

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

Affected products

• Huawei S5300 Firmware: through v200r001c00spc300
• Huawei S5700 Firmware: through v200r001c00spc300
• Huawei S6300 Firmware: through v200r001c00spc300
• Huawei S6700 Firmware: through v200r001c00spc300
• Huawei S7700 Firmware: through v200r001c00spc300
• Huawei S9300 Firmware: through v200r001c00spc300
• Huawei S9700 Firmware: through v200r001c00spc300

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.htm
• http://www.securityfocus.com/bid/73355
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.htm
• http://www.securityfocus.com/bid/73355

Get alerted when CVE-2015-2800 or the next vulnerability affects your stack