PT-2017-7040 · Huawei · Huawei Uap2105

Publicado 2017-09-25 · Atualizado 2017-10-06 · CVE-2015-6592

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei UAP2105 version before V300R012C00SPC160(BootRom)

Description The issue concerns a lack of authentication requirement for access to the serial port or the VxWorks shell.

Recommendations For versions prior to V300R012C00SPC160(BootRom), update to V300R012C00SPC160(BootRom) or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2015-6592

Produtos afetados

Huawei Uap2105

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6592 · Nota de Segurança
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-452865.htm · Aviso do Fabricante
• http://securityfocus.com/bid/76552 · Nota