Huawei s2300 Firmware vulnerabilities

8 CVEs affecting Huawei s2300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5285, published 2019-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-5394, published 2018-01-08. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
CVE-2019-5285, published 2019-06-04. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient…
CVE-2015-8676, published 2016-04-14. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and…
CVE-2015-8677, published 2016-04-14. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus…
CVE-2014-3223, published 2017-04-02. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special…
CVE-2017-17165, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00,…
CVE-2017-8147, published 2017-11-22. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
CVE-2015-3913, published 2017-06-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.