PT-2017-7282 · Huawei · S7700+6

Published 2017-09-25 · Updated 2017-10-10 · CVE-2015-7846

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei S7700 versions prior to V200R07C00SPC500 Huawei S9700 versions prior to V200R07C00SPC500 Huawei S9300 versions prior to V200R07C00SPC500 Huawei AR200 versions prior to V200R005C20SPC200 Huawei AR1200 versions prior to V200R005C20SPC200 Huawei AR2200 versions prior to V200R005C20SPC200 Huawei AR3200 versions prior to V200R005C20SPC200

Description The issue allows attackers with physical access to the CF card to obtain sensitive information.

Recommendations For Huawei S7700 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei S9700 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei S9300 versions prior to V200R07C00SPC500, update to V200R07C00SPC500 or later. For Huawei AR200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR1200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR2200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later. For Huawei AR3200 versions prior to V200R005C20SPC200, update to V200R005C20SPC200 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-7846

Affected Products

Ar1200

Ar200

Ar2200

Ar3200

S7700

S9300

S9700

References · 3

• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7846 · Security Note
• http://securityfocus.com/bid/76173 · Note