CVE-2015-8677 Details
Description
Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en | CVE | Vendor Advisory |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-399 | Resource Management Errors | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| huawei s5300ei firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph008 |
CPE
Remediation
| |
| huawei s5300ei | All versions |
CPE
Remediation
| |
| huawei s5300si firmware | >= v200r001c00, < v200r001sph018 >= v200r002c00, < v200r003sph011 |
CPE
Remediation
| |
| huawei s5300si | All versions |
CPE
Remediation
| |
| huawei s5310hi firmware | >= v200r001c00, < v200r001sph018 >= v200r002c00, < v200r003sph011 |
CPE
Remediation
| |
| huawei s5310hi | All versions |
CPE
Remediation
| |
| huawei s6300ei firmware | >= v200r001c00, < v200r001sph018 >= v200r002c00, < v200r003sph011 |
CPE
Remediation
| |
| huawei s6300ei | All versions |
CPE
Remediation
| |
| huawei s5300li firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph008 >= v200r006c00, < v200r006sph002 |
CPE
Remediation
| |
| huawei s5300li | All versions |
CPE
Remediation
| |
| huawei s2350ei firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph008 >= v200r006c00, < v200r006sph002 |
CPE
Remediation
| |
| huawei s2350ei | All versions |
CPE
Remediation
| |
| huawei s9300 firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph009 >= v200r006c00, < v200r006sph003 |
CPE
Remediation
| |
| huawei s9300 | All versions |
CPE
Remediation
| |
| huawei s9700 firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph009 >= v200r006c00, < v200r006sph003 |
CPE
Remediation
| |
| huawei s9700 | All versions |
CPE
Remediation
| |
| huawei s7700 firmware | >= v200r003c00, < v200r003sph011 >= v200r005c00, < v200r005sph009 >= v200r006c00, < v200r006sph003 |
CPE
Remediation
| |
| huawei s7700 | All versions |
CPE
Remediation
| |
| huawei s5720hi firmware | >= v200r006c00, < v200r006sph002 |
CPE
Remediation
| |
| huawei s5720hi | All versions |
CPE
Remediation
| |
| huawei s5720ei firmware | >= v200r006c00, < v200r006sph002 |
CPE
Remediation
| |
| huawei s5720ei | All versions |
CPE
Remediation
| |
| huawei s2300 firmware | >= v100r006c05, < v100r006sph022 |
CPE
Remediation
| |
| huawei s2300 | All versions |
CPE
Remediation
| |
| huawei s3300 firmware | >= v100r006c05, < v100r006sph022 |
CPE
Remediation
| |
| huawei s3300 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jun 20, 2019 | Reanalysis | [email protected] |
| Apr 28, 2016 | Modified Analysis | [email protected] |
| Apr 26, 2016 | Initial Analysis | [email protected] |