CVE-2015-8676 - CVE House
Back to Database
Status published High CVE-2015-8676

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and...

Vulnerability Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-8676

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2021-40033
There is an information exposure vulnerability on several Huawei Products....
Medium 5.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8

Affected Vendor

Affected Software

s2350ei firmware, s5300ei firmware, s5300si firmware, s5310hi firmware, s6300ei firmware, s5300li firmware, s9300 firmware, s7700 firmware, s9700 firmware, s2300 firmware, s3300 firmware
Vulnerable Versions:
v200r001c00, v200r002c00, v200r003c00, v100r006c05

Timeline

Official Publish: April 14th, 2016
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.