Strix
26.1K

CVE-2015-8086

UnknownEPSS 0.36%

Last modified

CVE-2015-8086 is a vulnerability of currently unknown severity. Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.

Description

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.

Metrics

EPSS Probability
0.36%

27.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HuaweiQuidway S5300 Firmwarev200r001c00spc300
HuaweiQuidway S9300 Firmwarev200r001c00spc300
HuaweiQuidway S9300 Firmwarev200r002c00spc100
HuaweiQuidway S9300 Firmwarev200r003c00spc500
HuaweiS5700 Firmwarev200r001c00
HuaweiS5700 Firmwarev200r002c00
HuaweiS5700 Firmwarev200r003c00
HuaweiS5700 Firmwarev200r005c00
HuaweiS5700 Firmwarev200r006c00
HuaweiS12700 Firmwarev200r005c00
HuaweiS12700 Firmwarev200r006c00
HuaweiAr Firmwarev200r001
HuaweiAr Firmwarev200r002
HuaweiAr Firmwarev200r003
HuaweiAr Firmwarev200r005c10
HuaweiAr Firmwarev200r005c20
HuaweiAr Firmwarev200r005c30
HuaweiS5300 Firmwarev200r002c00
HuaweiS5300 Firmwarev200r005c00spc500
HuaweiS5300 Firmwarev200r006c00spc500
HuaweiS9300 Firmwarev200r005c00spc300
HuaweiS9300 Firmwarev200r006c00spc500

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-8086?
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
How severe is CVE-2015-8086?
Severity scoring for CVE-2015-8086 is pending analysis. The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.
How do I fix CVE-2015-8086?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-8086?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST