PT-2017-7282 · Huawei · S7700+6

Publicado 2017-09-25 · Atualizado 2017-10-10 · CVE-2015-7846

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei S7700 versions prior to V200R07C00SPC500 Huawei S9700 versions prior to V200R07C00SPC500 Huawei S9300 versions prior to V200R07C00SPC500 Huawei AR200 versions prior to V200R005C20SPC200 Huawei AR1200 versions prior to V200R005C20SPC200 Huawei AR2200 versions prior to V200R005C20SPC200 Huawei AR3200 versions prior to V200R005C20SPC200

Description The issue allows attackers with physical access to the CF card to obtain sensitive information.

Recommendations For Huawei S7700 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei S9700 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei S9300 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei AR200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR1200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR2200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR3200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-7846

Produtos afetados

Ar1200

Ar200

Ar2200

Ar3200

S7700

S9300

S9700

Referências · 3

• http://securityfocus.com/bid/76173 · Nota
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7846 · Nota de Segurança