CVE-2015-8086 - CVE House
Back to Database
Status published Medium CVE-2015-8086

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers...

Vulnerability Description

Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-8086

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2021-40033
There is an information exposure vulnerability on several Huawei Products....
Medium 5.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8

Affected Vendor

Affected Software

quidway s5300 firmware, quidway s9300 firmware, s5700 firmware, s12700 firmware, ar firmware, s5300 firmware, s9300 firmware
Vulnerable Versions:
v200r001c00spc300, v200r002c00spc100, v200r003c00spc500, v200r001c00, v200r002c00, v200r003c00, v200r005c00, v200r006c00, v200r001, v200r002, v200r003, v200r005c10, v200r005c20, v200r005c30, v200r005c00spc500, v200r006c00spc500, v200r005c00spc300

Timeline

Official Publish: October 3rd, 2016
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.