CVE-2015-8083
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access and device restart) via unknown vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453506.htm
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.