CVE-2015-8677
Last modified
CVE-2015-8677 is a vulnerability of currently unknown severity. Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.. EPSS estimates a 1.11% chance of exploitation in the next 30 days.
Description
Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | S5300ei Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S5300ei Firmware | >= v200r005c00, < v200r005sph008 |
| Huawei | S5300si Firmware | >= v200r001c00, < v200r001sph018 |
| Huawei | S5300si Firmware | >= v200r002c00, < v200r003sph011 |
| Huawei | S5310hi Firmware | >= v200r001c00, < v200r001sph018 |
| Huawei | S5310hi Firmware | >= v200r002c00, < v200r003sph011 |
| Huawei | S6300ei Firmware | >= v200r001c00, < v200r001sph018 |
| Huawei | S6300ei Firmware | >= v200r002c00, < v200r003sph011 |
| Huawei | S5300li Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S5300li Firmware | >= v200r005c00, < v200r005sph008 |
| Huawei | S5300li Firmware | >= v200r006c00, < v200r006sph002 |
| Huawei | S2350ei Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S2350ei Firmware | >= v200r005c00, < v200r005sph008 |
| Huawei | S2350ei Firmware | >= v200r006c00, < v200r006sph002 |
| Huawei | S9300 Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S9300 Firmware | >= v200r005c00, < v200r005sph009 |
| Huawei | S9300 Firmware | >= v200r006c00, < v200r006sph003 |
| Huawei | S9700 Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S9700 Firmware | >= v200r005c00, < v200r005sph009 |
| Huawei | S9700 Firmware | >= v200r006c00, < v200r006sph003 |
| Huawei | S7700 Firmware | >= v200r003c00, < v200r003sph011 |
| Huawei | S7700 Firmware | >= v200r005c00, < v200r005sph009 |
| Huawei | S7700 Firmware | >= v200r006c00, < v200r006sph003 |
| Huawei | S5720hi Firmware | >= v200r006c00, < v200r006sph002 |
| Huawei | S5720ei Firmware | >= v200r006c00, < v200r006sph002 |
| Huawei | S2300 Firmware | >= v100r006c05, < v100r006sph022 |
| Huawei | S3300 Firmware | >= v100r006c05, < v100r006sph022 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-8677?
How severe is CVE-2015-8677?
How do I fix CVE-2015-8677?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-8671Huawei LogCenter V100R001C10 could allow an authenticated at…
- CVE-2015-8672The presentation transmission permission management mechanis…
- CVE-2015-8673Huawei TE30, TE40, TE50, and TE60 multimedia video conferenc…
- CVE-2015-8674Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2015-8675Huawei S5300 Campus Series switches with software before V20…
- CVE-2015-8676Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2…
- CVE-2015-8678The ION driver in Huawei P8 smartphones with software GRA-TL…
- CVE-2015-8679The Maxim_smartpa_dev driver in Huawei P8 smartphones with s…
- CVE-2015-8680The Graphics driver in Huawei P8 smartphones with software G…
- CVE-2015-8681The ovisp driver in Huawei P8 smartphones with software GRA-…
- CVE-2015-8682The Video0 driver in Huawei P8 smartphones with software GRA…
- CVE-2015-8683The putcontig8bitCIELab function in tif_getimage.c in LibTIF…
Are you affected by CVE-2015-8677?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST