Physical Access Vulnerability in Huawei Routers and Switches
CVE-2015-7846

4.6MEDIUM

Key Information:

Vendor
Huawei
Vendor
CVE Published:
25 September 2017

Summary

Huawei products including the S7700, S9700, S9300 series and AR200, AR1200, AR2200, and AR3200 series prior to specific software versions are susceptible to an information disclosure vulnerability. An attacker with physical access to the CF card of these devices may exploit this weakness to retrieve sensitive information, which compromises the security posture of the affected systems. Organizations using these routers and switches should ensure that physical security measures are strictly enforced.

References

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.