6.8

CVE-2015-8677: huawei s2300_firmware Resource Management Errors

CVSS: 6.8v2.0MediumModified
Published 14-04-2016Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2015-8677 is a medium (CVSS 6.8) Resource Management Errors vulnerability in huawei s2300_firmware. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.5% of scored vulnerabilities.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
1.11%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 14-04-2016
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

1.11%

Chance of exploitation in the next 30 days

Percentile

66%

Versus all other CVEs

30-day change

0.00 pp

From 1.11% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Huawei13 products
  • s2300_firmware≥ v100r006c05, < v100r006sph022
  • s2350ei_firmware≥ v200r003c00, < v200r003sph011 | ≥ v200r005c00, < v200r005sph008 | ≥ v200r006c00, < v200r006sph002
  • s3300_firmware≥ v100r006c05, < v100r006sph022
  • s5300ei_firmware≥ v200r003c00, < v200r003sph011 | ≥ v200r005c00, < v200r005sph008
  • s5300li_firmware≥ v200r003c00, < v200r003sph011 | ≥ v200r005c00, < v200r005sph008 | ≥ v200r006c00, < v200r006sph002

1 vendor · 13 products

References

1 links