CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm	Vendor Advisory

Advertisement

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:huawei:espace_unified_gateway_u1911:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1930:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1960:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1980:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1981:-:::::::*
	cpe:2.3:h:huawei:espace_unified_gateway_u1910:-:::::::*

Information

Published : 2015-11-19 12:59

Updated : 2015-11-20 06:59

NVD link : CVE-2015-8083

Mitre link : CVE-2015-8083

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

huawei

espace_unified_gateway_u1911
espace_unified_gateway_u1980
espace_unified_gateway_u1981
espace_unified_gateway_u1960
espace_unified_gateway_u1910
espace_firmware
espace_unified_gateway_u1930

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm", "name": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-8083", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-11-19T20:59Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "v100r001c20"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1911:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1930:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1960:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1980:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1981:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:huawei:espace_unified_gateway_u1910:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2015-11-20T14:59Z"}