What’s Vulnerable › Vulnerabilities

CVE-2015-5434

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-05 · updated 2026-06-17
• Weakness: CWE-264

Description

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."

Affected products

• HP Jc072B Hp 12500 Main Processing Unit: all versions
• HP Jc085A Hp A12518 Switch Chassis: all versions
• HP Jc086A Hp A12508 Switch Chassis: all versions
• HP Jc124A Hp A9508 Switch Chassis: all versions
• HP Jc124B Hp 9505 Switch Chassis: all versions
• HP Jc125A Hp A9512 Switch Chassis: all versions
• HP Jc125B Hp 9512 Switch Chassis: all versions
• HP Jc474A Hp A9508-V Switch Chassis: all versions
• HP Jc474B Hp 9508-V Switch Chassis: all versions
• HP Jc611A Hp 10508-V Switch Chassis: all versions
• HP Jc612A Hp 10508 Switch Chassis: all versions
• HP Jc613A Hp 10504 Switch Chassis: all versions
• HP Jc652A Hp 12508 Dc Switch Chassis: all versions
• HP Jc653A Hp 12518 Dc Switch Chassis: all versions
• HP Jc654A Hp 12504 Ac Switch Chassis: all versions
• HP Jc655A Hp 12504 Dc Switch Chassis: all versions
• HP Jc748A Hp 10512 Switch Chassis: all versions
• HP Jc808A Hp 12500 Taa Main Processing Unit: all versions
• HP Jf430A Hp A12518 Switch Chassis: all versions
• HP Jf430B Hp 12518 Switch Chassis: all versions
• HP Jf430C Hp 12518 Ac Switch Chassis: all versions
• HP Jf431A Hp A12508 Switch Chassis: all versions
• HP Jf431B Hp 12508 Switch Chassis: all versions
• HP Jf431C Hp 12508 Ac Switch Chassis: all versions
• HP Jg296A Hp 5920Af-24Xg Switch: all versions
• HP Jg353A Hp Hsr6602-G Router: all versions
• HP Jg354A Hp Hsr6602-Xg Router: all versions
• HP Jg361A Hp Hsr6802 Router Chassis: all versions
• HP Jg361B Hp Hsr6802 Router Chassis: all versions
• HP Jg362A Hp Hsr6804 Router Chassis: all versions

References

• http://www.securityfocus.com/bid/79869
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492
• http://www.securityfocus.com/bid/79869
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492

Get alerted when CVE-2015-5434 or the next vulnerability affects your stack