Strix
26.1K

CVE-2015-8085

UnknownEPSS 0.36%

Last modified

CVE-2015-8085 is a vulnerability of currently unknown severity. Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.

Description

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.

Metrics

EPSS Probability
0.36%

27.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HuaweiS9300 Firmwarev200r005c00spc300
HuaweiS9300 Firmwarev200r006c00spc500
HuaweiS12700 Firmwarev200r005c00
HuaweiS12700 Firmwarev200r006c00
HuaweiQuidway S9300 Firmwarev200r001c00spc300
HuaweiQuidway S9300 Firmwarev200r002c00spc100
HuaweiQuidway S9300 Firmwarev200r003c00spc500
HuaweiAr Firmwarev200r001
HuaweiAr Firmwarev200r002
HuaweiAr Firmwarev200r003
HuaweiAr Firmwarev200r005c10
HuaweiAr Firmwarev200r005c20
HuaweiAr Firmwarev200r005c30
HuaweiQuidway S5300 Firmwarev200r001c00spc300
HuaweiS5700 Firmwarev200r001c00
HuaweiS5700 Firmwarev200r002c00
HuaweiS5700 Firmwarev200r003c00
HuaweiS5700 Firmwarev200r005c00
HuaweiS5700 Firmwarev200r006c00
HuaweiS5300 Firmwarev200r002c00
HuaweiS5300 Firmwarev200r005c00spc500
HuaweiS5300 Firmwarev200r006c00spc500

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-8085?
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.
How severe is CVE-2015-8085?
Severity scoring for CVE-2015-8085 is pending analysis. The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.
How do I fix CVE-2015-8085?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-8085?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST