PT-2015-7722 · Huawei · Usg2200+4

Publicado 2015-10-21 · Atualizado 2015-12-08 · CVE-2015-8084

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei USG5500 versions prior to V300R001C10SPC600 Huawei USG2100 versions prior to V300R001C10SPC600 Huawei USG2200 versions prior to V300R001C10SPC600 Huawei USG5100 versions prior to V300R001C10SPC600

Description The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via crafted DHCP packets when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface. This occurs because the device is unable to parse specific DHCP packets correctly.

Recommendations For Huawei USG5500 versions prior to V300R001C10SPC600, update to V300R001C10SPC600 or later to resolve the issue. For Huawei USG2100 versions prior to V300R001C10SPC600, update to V300R001C10SPC600 or later to resolve the issue. For Huawei USG2200 versions prior to V300R001C10SPC600, update to V300R001C10SPC600 or later to resolve the issue. For Huawei USG5100 versions prior to V300R001C10SPC600, update to V300R001C10SPC600 or later to resolve the issue. As a temporary workaround, consider disabling the "DHCP Snooping" function or restricting the use of "option82 insert" or "option82 rebuild" on interfaces until a patch is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-8084

Produtos afetados

Huawei Vrp

Usg2100

Usg2200

Usg5100

Usg5500

Referências · 5

• https://huawei.com/en/psirt/security-advisories/hw-457916 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8084 · Nota de Segurança
• http://securityfocus.com/bid/77300 · Nota
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457916.htm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8084 · Nota de Segurança