Huawei s5720ei Firmware vulnerabilities

2 CVEs affecting Huawei s5720ei Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8677, published 2016-04-14.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
• CVE-2015-8677, published 2016-04-14. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus…