Physical Access Vulnerability in Huawei Routers and Switches
CVE-2015-7846
4.6MEDIUM
Summary
Huawei products including the S7700, S9700, S9300 series and AR200, AR1200, AR2200, and AR3200 series prior to specific software versions are susceptible to an information disclosure vulnerability. An attacker with physical access to the CF card of these devices may exploit this weakness to retrieve sensitive information, which compromises the security posture of the affected systems. Organizations using these routers and switches should ensure that physical security measures are strictly enforced.
References
CVSS V3.1
Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved