Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2015-8265 Details
Description
Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.kb.cert.org/vuls/id/972224 | CVE | Third Party AdvisoryUS Government Resource |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160129-01-dns-en | CVE | Vendor Advisory |
| http://www.securityfocus.com/bid/82246 | CVE | |
| https://www.kb.cert.org/vuls/id/972224 | [email protected] | Third Party AdvisoryUS Government Resource |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160129-01-dns-en | [email protected] | Vendor Advisory |
| http://www.securityfocus.com/bid/82246 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| huawei e5151 | All versions |
CPE
Remediation
| |
| huawei e5186 | All versions |
CPE
Remediation
| |
| huawei e5151 firmware | <= e5151s-2tcpu-v200r001b141d13sp00c1080 |
CPE
Remediation
| |
| huawei e5186 firmware | <= v200r001b306d01c00 |
CPE
Remediation
| |
Change History
11 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 28, 2016 | CVE Modified | [email protected] |
| Aug 19, 2016 | Modified Analysis | [email protected] |
| Jul 12, 2016 | CVE Translated | [email protected] |
| Jul 12, 2016 | CVE Modified | [email protected] |
| Mar 22, 2016 | Modified Analysis | [email protected] |
| Mar 21, 2016 | Initial Analysis | [email protected] |
| Mar 21, 2016 | Initial Analysis | [email protected] |