CVE-2015-2800: huawei s5300_firmware Improper Authentication
Vulnerability summary
CVE-2015-2800 is a high (CVSS 7.8) Improper Authentication vulnerability in huawei s5300_firmware. EPSS estimates a 1.74% chance of exploitation in the next 30 days, higher than 77.3% of scored vulnerabilities.
Timeline
- 08-06-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.74%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.74% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei7 products
- s5300_firmware≤ v200r001c00spc300
- s5700_firmware≤ v200r001c00spc300
- s6300_firmware≤ v200r001c00spc300
- s6700_firmware≤ v200r001c00spc300
- s7700_firmware≤ v200r001c00spc300
1 vendor · 7 products
References
2 links- www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.htmX Refsource CONFIRMThird Party AdvisoryVendor Advisory