Huawei s6300 Firmware vulnerabilities

12 CVEs affecting Huawei s6300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5285, published 2019-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2800, published 2017-06-08. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows…
CVE-2014-5394, published 2018-01-08. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
CVE-2019-5285, published 2019-06-04. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient…
CVE-2014-4705, published 2018-01-30. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200,…
CVE-2016-6518, published 2016-09-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of…
CVE-2014-3223, published 2017-04-02. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special…
CVE-2017-17165, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00,…
CVE-2017-8147, published 2017-11-22. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
CVE-2014-8572, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and…
CVE-2016-8773, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00,…

Latest

CVE-2016-8797, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software…
CVE-2014-4706, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software…