Sign-up

ID

VAR-201511-0275


CVE

CVE-2015-7845


TITLE

plural Huawei eSpace Unified Gateway Software CLI Service disruption in module exception handling mechanism (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2015-005995

DESCRIPTION

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets. Huawei eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, and eSpace U1981 are Huawei eSpace U1900 series switches. Remote attackers can send denial-of-service attacks by sending specially crafted SSH packets. The following products and versions are affected: Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 using V100R001C20 software

Trust: 2.52

sources: NVD: CVE-2015-7845 // JVNDB: JVNDB-2015-005995 // CNVD: CNVD-2015-07756 // IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // VULHUB: VHN-85806 // VULMON: CVE-2015-7845

IOT TAXONOMY

category:['ICS', 'Network device']sub_category: -

Trust: 0.6

category:['ICS']sub_category: -

Trust: 0.2

sources: IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-07756

AFFECTED PRODUCTS

vendor:huaweimodel:espacescope:lteversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:espace u1910 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1911 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1930 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1960 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1980 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1981 unified gatewayscope: - version: -

Trust: 0.8

vendor:huaweimodel:espacescope:ltversion:v100r001c20sph605

Trust: 0.8

vendor:huaweimodel:espace u1981scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1980scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1960scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1930scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1911scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1910scope: - version: -

Trust: 0.6

vendor:huaweimodel:espacescope:eqversion:v100r001c20

Trust: 0.6

vendor:espacemodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-07756 // JVNDB: JVNDB-2015-005995 // CNNVD: CNNVD-201511-333 // NVD: CVE-2015-7845

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-7845
value: MEDIUM

Trust: 1.0

NVD: CVE-2015-7845
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2015-07756
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201511-333
value: MEDIUM

Trust: 0.6

IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

VULHUB: VHN-85806
value: MEDIUM

Trust: 0.1

VULMON: CVE-2015-7845
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-7845
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2015-07756
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-85806
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-07756 // VULHUB: VHN-85806 // VULMON: CVE-2015-7845 // JVNDB: JVNDB-2015-005995 // CNNVD: CNNVD-201511-333 // NVD: CVE-2015-7845

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-85806 // JVNDB: JVNDB-2015-005995 // NVD: CVE-2015-7845

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201511-333

TYPE

Input validation

Trust: 0.8

sources: IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201511-333

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-005995

PATCH
title:Huawei-SA-20150909-01-U1900url:http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453512.htm
Trust: 0.8
title:Patches for multiple Huawei eSpace switch denial of service vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/67071
Trust: 0.6
title:Multiple Huawei eSpace Repair measures for switch denial of service vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=58807
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2015-07756 // 
            
            
            
            JVNDB: JVNDB-2015-005995 // 
            
            
            
            CNNVD: CNNVD-201511-333

EXTERNAL IDS
db:NVDid:CVE-2015-7845
Trust: 3.4
db:CNNVDid:CNNVD-201511-333
Trust: 0.9
db:CNVDid:CNVD-2015-07756
Trust: 0.8
db:JVNDBid:JVNDB-2015-005995
Trust: 0.8
db:NSFOCUSid:31603
Trust: 0.6
db:IVDid:6E8180BA-2351-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:SEEBUGid:SSVID-89904
Trust: 0.1
db:VULHUBid:VHN-85806
Trust: 0.1
db:VULMONid:CVE-2015-7845
Trust: 0.1
sources:
            
            
            IVD: 6e8180ba-2351-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2015-07756 // 
            
            
            
            VULHUB: VHN-85806 // 
            
            
            
            VULMON: CVE-2015-7845 // 
            
            
            
            JVNDB: JVNDB-2015-005995 // 
            
            
            
            CNNVD: CNNVD-201511-333 // 
            
            
            
            NVD: CVE-2015-7845

REFERENCES
url:http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453512.htm
Trust: 2.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7845
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7845
Trust: 0.8
url:http://www.nsfocus.net/vulndb/31603
Trust: 0.6
url:https://cwe.mitre.org/data/definitions/20.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2015-07756 // 
            
            
            
            VULHUB: VHN-85806 // 
            
            
            
            VULMON: CVE-2015-7845 // 
            
            
            
            JVNDB: JVNDB-2015-005995 // 
            
            
            
            CNNVD: CNNVD-201511-333 // 
            
            
            
            NVD: CVE-2015-7845

SOURCES
db:IVDid:6e8180ba-2351-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2015-07756
db:VULHUBid:VHN-85806
db:VULMONid:CVE-2015-7845
db:JVNDBid:JVNDB-2015-005995
db:CNNVDid:CNNVD-201511-333
db:NVDid:CVE-2015-7845

LAST UPDATE DATE
2024-11-23T22:01:40.077000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2015-07756date:2015-11-24T00:00:00
db:VULHUBid:VHN-85806date:2015-11-20T00:00:00
db:VULMONid:CVE-2015-7845date:2015-11-20T00:00:00
db:JVNDBid:JVNDB-2015-005995date:2015-11-24T00:00:00
db:CNNVDid:CNNVD-201511-333date:2015-11-20T00:00:00
db:NVDid:CVE-2015-7845date:2024-11-21T02:37:31.070

SOURCES RELEASE DATE
db:IVDid:6e8180ba-2351-11e6-abef-000c29c66e3ddate:2015-11-24T00:00:00
db:CNVDid:CNVD-2015-07756date:2015-11-24T00:00:00
db:VULHUBid:VHN-85806date:2015-11-19T00:00:00
db:VULMONid:CVE-2015-7845date:2015-11-19T00:00:00
db:JVNDBid:JVNDB-2015-005995date:2015-11-24T00:00:00
db:CNNVDid:CNNVD-201511-333date:2015-11-20T00:00:00
db:NVDid:CVE-2015-7845date:2015-11-19T20:59:06.097