CVE-2015-8677

N/A

Published: April 14, 2016 at 03:00 PM UTC

Updated: June 17, 2026 at 12:35 AM UTC

26 products affected across 1 vendorS7700 FirmwareS9700 FirmwareS9300 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

S2300 Firmware · Huawei

95%

v100r006c05 ≤ v < v100r006sph022

Affected range stops below v100r006sph022, so it looks safe — our inference, not a vendor statement

huawei-s2300 (same device)

S2350EI Firmware · Huawei

95%

v200r003c00 ≤ v < v200r003sph011v200r005c00 ≤ v < v200r005sph008v200r006c00 ≤ v < v200r006sph002

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r005sph008, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r006sph002, so it looks safe — our inference, not a vendor statement

huawei-s2350ei (same device)

S3300 Firmware · Huawei

95%

v100r006c05 ≤ v < v100r006sph022

Affected range stops below v100r006sph022, so it looks safe — our inference, not a vendor statement

huawei-s3300 (same device)

S5300EI Firmware · Huawei

95%

v200r003c00 ≤ v < v200r003sph011v200r005c00 ≤ v < v200r005sph008

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r005sph008, so it looks safe — our inference, not a vendor statement

huawei-s5300ei (same device)

S5300LI Firmware · Huawei

95%

v200r003c00 ≤ v < v200r003sph011v200r005c00 ≤ v < v200r005sph008v200r006c00 ≤ v < v200r006sph002

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r005sph008, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r006sph002, so it looks safe — our inference, not a vendor statement

huawei-s5300li (same device)

S5300SI Firmware · Huawei

95%

v200r001c00 ≤ v < v200r001sph018v200r002c00 ≤ v < v200r003sph011

Affected range stops below v200r001sph018, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

huawei-s5300si (same device)

S5310HI Firmware · Huawei

95%

v200r001c00 ≤ v < v200r001sph018v200r002c00 ≤ v < v200r003sph011

Affected range stops below v200r001sph018, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

huawei-s5310hi (same device)

S5720EI Firmware · Huawei

95%

v200r006c00 ≤ v < v200r006sph002

Affected range stops below v200r006sph002, so it looks safe — our inference, not a vendor statement

huawei-s5720ei (same device)

S5720HI Firmware · Huawei

95%

v200r006c00 ≤ v < v200r006sph002

Affected range stops below v200r006sph002, so it looks safe — our inference, not a vendor statement

huawei-s5720hi (same device)

S6300EI Firmware · Huawei

95%

v200r001c00 ≤ v < v200r001sph018v200r002c00 ≤ v < v200r003sph011

Affected range stops below v200r001sph018, so it looks safe — our inference, not a vendor statement

Affected range stops below v200r003sph011, so it looks safe — our inference, not a vendor statement

huawei-s6300ei (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en

CVSS

6.8MEDIUM[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card