Vulnerability Description
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Quidway S5300 Firmware | v200r001c00spc300 |
| Huawei | Quidway S5300 | - |
| Huawei | Quidway S9300 Firmware | v200r001c00spc300 |
| Huawei | Quidway S9300 | - |
| Huawei | S5700 Firmware | v200r001c00 |
| Huawei | S5700 | - |
| Huawei | S12700 Firmware | v200r005c00 |
| Huawei | S12700 | - |
| Huawei | Ar Firmware | v200r001 |
| Huawei | Ar | - |
| Huawei | S5300 Firmware | v200r002c00 |
| Huawei | S5300 | - |
| Huawei | S9300 Firmware | v200r005c00spc300 |
| Huawei | S9300 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/hw-455876Vendor Advisory
- http://www.securityfocus.com/bid/76897
- http://www.huawei.com/en/psirt/security-advisories/hw-455876Vendor Advisory
- http://www.securityfocus.com/bid/76897
FAQ
What is CVE-2015-8086?
CVE-2015-8086 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300...
How severe is CVE-2015-8086?
CVE-2015-8086 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-8086?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Quidway S5300 Firmware, Huawei Quidway S5300, Huawei Quidway S9300 Firmware, Huawei Quidway S9300, Huawei S5700 Firmware.