medium4.9
CVE-2015-8086
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C…
Impact
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Quidway S5300 Firmware | Version v200r001c00spc300 |
| Huawei | Quidway S9300 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| Huawei | S5700 Firmware | Versions v200r001c00, v200r002c00, v200r003c00, v200r005c00, v200r006c00 |
| Huawei | S12700 Firmware | Versions v200r005c00, v200r006c00 |
| Huawei | Ar Firmware | Versions v200r001, v200r002, v200r003, v200r005c10, v200r005c20, v200r005c30 |
| Huawei | S5300 Firmware | Versions v200r002c00, v200r005c00spc500, v200r006c00spc500 |
| Huawei | S9300 Firmware | Versions v200r005c00spc300, v200r006c00spc500 |