CVE-2015-8265

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-01 · updated 2026-06-17
Weakness: CWE-20

Description

Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.

Affected products

Huawei E5151 Firmware: through e5151s-2tcpu-v200r001b141d13sp00c1080
Huawei E5186 Firmware: through v200r001b306d01c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160129-01-dns-en
http://www.securityfocus.com/bid/82246
https://www.kb.cert.org/vuls/id/972224
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160129-01-dns-en
http://www.securityfocus.com/bid/82246
https://www.kb.cert.org/vuls/id/972224

Get alerted when CVE-2015-8265 or the next vulnerability affects your stack