PT-2015-5689 · Huawei · Huawei Ar1220+1

Publicado 2015-03-18 · Atualizado 2017-06-16 · CVE-2015-2255

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Huawei AR1220 routers with software before V200R005SPH006

Description The issue allows remote attackers to cause a denial of service, resulting in a board reset. This occurs when a large amount of traffic is sent from the GE port to the FE port. Under specific configurations, an attacker can exploit this by sending massive traffic to the FE port from the GE port on the main board, causing the interface board to reset unexpectedly.

Recommendations For Huawei AR1220 routers with software before V200R005SPH006, update the software to version V200R005SPH006 or later to resolve the issue. As a temporary workaround, consider restricting traffic from the GE port to the FE port to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2015-2255

Produtos afetados

Huawei Ar1220

Huawei Vrp

Referências · 4

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417840.htm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2255 · Nota de Segurança
• https://huawei.com/en/psirt/security-advisories/hw-417840 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2255 · Nota de Segurança