Huawei s5300si Firmware vulnerabilities

3 CVEs affecting Huawei s5300si Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3913, published 2017-06-08.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-8676, published 2016-04-14. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and…
• CVE-2015-8677, published 2016-04-14. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus…
• CVE-2015-3913, published 2017-06-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.