PT-2017-7040 · Huawei · Huawei Uap2105

Published 2017-09-25 · Updated 2017-10-06 · CVE-2015-6592

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei UAP2105 version before V300R012C00SPC160(BootRom)

Description The issue concerns a lack of authentication requirement for access to the serial port or the VxWorks shell.

Recommendations For versions prior to V300R012C00SPC160(BootRom), update to V300R012C00SPC160(BootRom) or later to resolve the issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-6592

Affected Products

Huawei Uap2105

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6592 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-452865.htm · Vendor Advisory
• http://securityfocus.com/bid/76552 · Note