« Volver al listado

CVE-2015-7845

Estado: ModificadaMedia (5)—

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Espace Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-7845",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-19T20:59:06.097",
  "references": [
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453512.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453512.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets."
    },
    {
      "lang": "es",
      "value": "El mecanismo de manejo de excepción en el CLI Module en Huawei eSpace en puertas de enlace unificadas U1910, U1911, U1930, U1960, U1980 y U1981 con software en versiones anteriores a V100R001C20SPH605 permite a atacantes remotos causar una denegación de servicio (interrupción CLI) a través de paquetes SSH manipulados."
    }
  ],
  "lastModified": "2026-06-17T00:33:14.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC0804DC-5A26-4779-A45F-ABE3855487D0",
              "versionEndIncluding": "v100r001c20"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1910:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E3938FA3-B2F9-4D55-BBB8-4F6E3640D78D"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1911:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1DEB20B5-A623-48DD-9552-9D330B04F111"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1930:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C8EDF4B0-9327-4046-9321-34E4D7480583"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1960:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D31A296E-4816-464E-B1AD-9B5999EF3F74"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1980:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ABF91A94-1F6B-495D-B279-36839E37F9E1"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1981:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E315CED9-0F8F-4625-AAA6-61C9758AACC1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}