CVE-2015-7843

The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 does not limit the number of query attempts, which allows remote authenticated users to obtain credentials of higher-level users via a brute force attack.

• CWE-254

• http://www.securityfocus.com/bid/76836Third Party Advisory, VDB Entry
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htmVendor Advisory
• http://www.securityfocus.com/bid/76836Third Party Advisory, VDB Entry
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htmVendor Advisory

Published

Oct 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7837The Linux kernel, as used in Red Hat Enterprise Linux 7, ker…
• CVE-2015-7838ProcessFileUpload.jsp in SolarWinds Storage Manager before 6…
• CVE-2015-7839SolarWinds Log and Event Manager (LEM) allows remote attacke…
• CVE-2015-7840The command line management console (CMC) in SolarWinds Log …
• CVE-2015-7841The login page of the server on Huawei FusionServer rack ser…
• CVE-2015-7842Huawei FusionServer rack servers RH2288 V3 with software bef…
• CVE-2015-7844Huawei FusionAccess with software V100R005C10,V100R005C20 co…
• CVE-2015-7845The exception handling mechanism in the CLI Module in Huawei…
• CVE-2015-7846Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR20…
• CVE-2015-7847Huawei MBB (Mobile Broadband) product E3272s with software v…
• CVE-2015-7848An integer overflow can occur in NTP-dev.4.3.70 leading to a…7.5
• CVE-2015-7849Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2…8.8