Lucene search

[email protected]CVE-2015-8084

HistoryDec 07, 2015 - 8:59 p.m.

CVE-2015-8084

2015-12-0720:59:10

CWE-20

[email protected]

web.nvd.nist.gov

huawei

usg5500

usg2100

usg2200

usg5100

dhcp snooping

option82 insert

option82 rebuild

denial of service

reboot

cve-2015-8084

nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when “DHCP Snooping” is enabled and either “option82 insert” or “option82 rebuild” is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets.

Affected configurations

NVD

Node

huaweiunified_security_gateway_firmwareRange≤v300r001c10

AND

huaweiusg2100

huaweiusg2200

huaweiusg5100

huaweiusg5500

CPENameOperatorVersion
huawei:unified_security_gateway_firmwarehuawei unified security gateway firmwarelev300r001c10

CPE	Name	Operator	Version
huawei:unified_security_gateway_firmware	huawei unified security gateway firmware	le	v300r001c10

References

www.securityfocus.com/bid/77300

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457916.htm

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON

Related for CVE-2015-8084

cvelist1 nvd1 prion1 huawei1