What’s Vulnerable › Vulnerabilities

CVE-2015-7846

• Severity: medium (CVSS 4.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-25 · updated 2026-06-17
• Weakness: CWE-200

Description

Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.

Affected products

• Huawei Ar1200 Firmware: v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc200, v200r003c01spc300, v200r003c01spc500 (+3)
• Huawei Ar200 Firmware: v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc200, v200r003c01spc300, v200r003c01spc500 (+3)
• Huawei Ar2200 Firmware: v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc200, v200r003c01spc300, v200r003c01spc500 (+3)
• Huawei AR3200: v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc200, v200r003c01spc300, v200r003c01spc500 (+3)
• Huawei S7700 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc500, v200r005c00spc300, v200r006c00spc300, v200r006c00spc500
• Huawei S9300 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc500, v200r005c00spc300, v200r006c00spc300, v200r006c00spc500
• Huawei S9700 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc500, v200r005c00spc300, v200r006c00spc300, v200r006c00spc500

References

• http://www.securityfocus.com/bid/76173
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm
• http://www.securityfocus.com/bid/76173
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm

Get alerted when CVE-2015-7846 or the next vulnerability affects your stack