NetSight
medium4.9

CVE-2015-8085

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C…

Impact

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.

Affected products

VendorProductAffected versions
HuaweiS9300 Firmware
Versions v200r005c00spc300, v200r006c00spc500
HuaweiS12700 Firmware
Versions v200r005c00, v200r006c00
HuaweiQuidway S9300 Firmware
Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc500
HuaweiAr Firmware
Versions v200r001, v200r002, v200r003, v200r005c10, v200r005c20, v200r005c30
HuaweiQuidway S5300 Firmware
Version v200r001c00spc300
HuaweiS5700 Firmware
Versions v200r001c00, v200r002c00, v200r003c00, v200r005c00, v200r006c00
HuaweiS5300 Firmware
Versions v200r002c00, v200r005c00spc500, v200r006c00spc500

Weakness classification

References