« Volver al listado

CVE-2015-2255

Estado: ModificadaMedia (5.9)—

Routers Huawei AR1220 con software anterior a V200R005SPH006 permiten a atacantes remotos causar una denegación de servicio (reinicio de placa) a través de vectores relacionados con una gran cantidad de tráfico desde el puerto GE al puerto FE.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Ar1220 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-2255",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-06-08T16:29:00.370",
  "references": [
    {
      "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417840.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417840.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-19"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service (board reset) via vectors involving a large amount of traffic from the GE port to the FE port."
    },
    {
      "lang": "es",
      "value": "Routers Huawei AR1220 con software anterior a V200R005SPH006 permiten a atacantes remotos causar una denegación de servicio (reinicio de placa) a través de vectores relacionados con una gran cantidad de tráfico desde el puerto GE al puerto FE."
    }
  ],
  "lastModified": "2026-06-17T00:23:49.720",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ar1220_firmware:v200r005c00spc200:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EDB3D2B-9FC4-418E-9B6B-17475059A94B"
            },
            {
              "criteria": "cpe:2.3:o:huawei:ar1220_firmware:v200r005c10spc500:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ABEDD1F-6F39-4B1C-B1DC-09E2F9B7CF0B"
            },
            {
              "criteria": "cpe:2.3:o:huawei:ar1220_firmware:v200r005c20spc100:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A81589F9-E558-4225-A4F9-56E21E8F1D66"
            },
            {
              "criteria": "cpe:2.3:o:huawei:ar1220_firmware:v200r005c20spc200:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D98342DA-545E-427D-95EF-8F2D27E3E0A9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ar1220:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FC6B4D01-704E-447E-B25F-4A8CDC4CA3F4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}