PT-2015-5689 · Huawei · Huawei Ar1220+1

Published 2015-03-18 · Updated 2017-06-16 · CVE-2015-2255

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Huawei AR1220 routers with software before V200R005SPH006

Description The issue allows remote attackers to cause a denial of service, resulting in a board reset. This occurs when a large amount of traffic is sent from the GE port to the FE port. Under specific configurations, an attacker can exploit this by sending massive traffic to the FE port from the GE port on the main board, causing the interface board to reset unexpectedly.

Recommendations For Huawei AR1220 routers with software before V200R005SPH006, update the software to version V200R005SPH006 or later to resolve the issue. As a temporary workaround, consider restricting traffic from the GE port to the FE port to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-2255

Affected Products

Huawei Ar1220

Huawei Vrp

References · 4

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417840.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2255 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2255 · Security Note
• https://huawei.com/en/psirt/security-advisories/hw-417840 · Note