Medium severity · published Sep 25, 2017
CVE-2015-7846
Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain…
4.6
CVSS
0.3%
EPSS
No
On KEV
Description
Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ar1200 Firmware · Huawei
v200r003c00spc100; v200r003c00spc200; v200r003c01spc100; v200r003c01spc200; v200r003c01spc300; v200r003c01spc500; +3 more · source: NVD
AF
Ar200 Firmware · Huawei
v200r003c00spc100; v200r003c00spc200; v200r003c01spc100; v200r003c01spc200; v200r003c01spc300; v200r003c01spc500; +3 more · source: NVD
AF
Ar2200 Firmware · Huawei
v200r003c00spc100; v200r003c00spc200; v200r003c01spc100; v200r003c01spc200; v200r003c01spc300; v200r003c01spc500; +3 more · source: NVD
AF
Ar3200 Firmware · Huawei
v200r003c00spc100; v200r003c00spc200; v200r003c01spc100; v200r003c01spc200; v200r003c01spc300; v200r003c01spc500; +3 more · source: NVD
SF
S7700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc500; v200r005c00spc300; v200r006c00spc300; v200r006c00spc500 · source: NVD
SF
S9300 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc500; v200r005c00spc300; v200r006c00spc300; v200r006c00spc500 · source: NVD
SF
S9700 Firmware · Huawei
v200r001c00spc300; v200r002c00spc100; v200r003c00spc500; v200r005c00spc300; v200r006c00spc300; v200r006c00spc500 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7846
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7846
Third Party Advisory
http://www.securityfocus.com/bid/76173
Vendor Advisory
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm
More from Ar1200 Firmware
9.8
CVE-2017-17301
Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S…
7.5
CVE-2019-19417
The SIP module of some Huawei products have a denial of service (DoS) vulnerability
7.5
CVE-2019-19416
The SIP module of some Huawei products have a denial of service (DoS) vulnerability
7.5
CVE-2019-19415
The SIP module of some Huawei products have a denial of service (DoS) vulnerability
7.5
CVE-2019-5304
Some Huawei products have a buffer error vulnerability