Huawei s5720hi Firmware vulnerabilities

3 CVEs affecting Huawei s5720hi Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3913, published 2017-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
CVE-2015-8677, published 2016-04-14. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus…
CVE-2015-3913, published 2017-06-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.