CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm	Vendor Advisory
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:huawei:espace_unified_gateway_u1910:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1911:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1930:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1960:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1980:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1981:-:::::::*

History

21 Nov 2024, 02:37

Type	Values Removed	Values Added
References	~~() http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm - Vendor Advisory~~	() http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm - Vendor Advisory

Information

Published : 2015-11-19 20:59

Updated : 2024-11-21 02:37

NVD link : CVE-2015-8083

Mitre link : CVE-2015-8083

CVE.ORG link : CVE-2015-8083

JSON object : View

Products Affected

huawei

espace_unified_gateway_u1980
espace_unified_gateway_u1981
espace_unified_gateway_u1910
espace_unified_gateway_u1911
espace_unified_gateway_u1930
espace_firmware
espace_unified_gateway_u1960

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2015-8083", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-11-19T20:59:10.913", "references": [{"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors."}, {"lang": "es", "value": "Un m\u00f3dulo no especificado en Huawei eSpace en puertas de enlace unificadas U1910, U1911, U1930, U1960, U1980 y U1981con software en versiones anteriores a V200R003C00SPC300 no inicializa adecuadamente la memoria al procesar los mensajes timeout, lo que permite a atacantes remotos causar una denegaci\u00f3n de servicio (acceso a memoria fuera de rango y reinicio de dispositivo) a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T02:37:59.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC0804DC-5A26-4779-A45F-ABE3855487D0", "versionEndIncluding": "v100r001c20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1910:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1534E8C-4AF3-4C0C-8484-5051D2DBAD98"}, {"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1911:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E88DEC55-D790-43E2-890A-885F6D385CE0"}, {"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1930:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DD35796-A52C-4111-8A52-559256726A4E"}, {"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1960:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "41D7BAB8-609F-4474-9849-41FB7DA7FEFC"}, {"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1980:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BCC1AADB-E94E-4E08-8E90-44578E7E39AF"}, {"criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1981:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D7B1FDF-16B7-4171-B9BD-BF3689AF8945"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}