« Volver al listado

CVE-2015-8083

Estado: ModificadaAlta (7.8)—

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Espace Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-8083",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-19T20:59:10.913",
  "references": [
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Un módulo no especificado en Huawei eSpace en puertas de enlace unificadas U1910, U1911, U1930, U1960, U1980 y U1981con software en versiones anteriores a V200R003C00SPC300 no inicializa adecuadamente la memoria al procesar los mensajes timeout, lo que permite a atacantes remotos causar una denegación de servicio (acceso a memoria fuera de rango y reinicio de dispositivo) a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-17T00:34:00.837",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:espace_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC0804DC-5A26-4779-A45F-ABE3855487D0",
              "versionEndIncluding": "v100r001c20"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1910:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A1534E8C-4AF3-4C0C-8484-5051D2DBAD98"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1911:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E88DEC55-D790-43E2-890A-885F6D385CE0"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1930:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2DD35796-A52C-4111-8A52-559256726A4E"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1960:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "41D7BAB8-609F-4474-9849-41FB7DA7FEFC"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1980:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BCC1AADB-E94E-4E08-8E90-44578E7E39AF"
            },
            {
              "criteria": "cpe:2.3:h:huawei:espace_unified_gateway_u1981:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3D7B1FDF-16B7-4171-B9BD-BF3689AF8945"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}