CVE-2017-15327
Severity Score
4.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerability on Huawei switch products. The system incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by authenticated user. Successful exploit could cause information disclosure.
S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00 y V200R010C00 tienen una vulnerabilidad de autorización incorrecta en productos switch de Huawei. El sistema realiza de manera errónea una comprobación de autorización cuando un usuario normal intenta acceder a cierta información a la que se supone que solo pueden acceder los usuarios autenticados. La explotación con éxito podría resultar en una divulgación de información.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-10-14 CVE Reserved
- 2018-04-11 CVE Published
- 2023-07-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180328-01-authentication-en | 2018-05-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r005c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r005c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r006c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r006c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r006c01 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r006c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r007c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r007c01 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r007c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r007c20 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r007c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r008c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r008c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r008c06 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r008c06" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r009c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r009c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware" | v200r010c00 Search vendor "Huawei" for product "S12700 Firmware" and version "v200r010c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S12700 Search vendor "Huawei" for product "S12700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r001c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r001c01 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r001c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r002c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r003c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r005c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r005c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r006c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r006c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r006c01 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r006c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r007c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r007c01 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r007c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r008c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r008c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r008c06 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r008c06" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r009c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r009c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware" | v200r010c00 Search vendor "Huawei" for product "S7700 Firmware" and version "v200r010c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S7700 Search vendor "Huawei" for product "S7700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r001c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r001c01 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r001c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r002c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r003c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r005c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r005c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r006c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r006c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r006c01 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r006c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r007c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r007c01 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r007c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r008c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r008c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r009c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r009c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | S9700 Firmware Search vendor "Huawei" for product "S9700 Firmware" | v200r010c00 Search vendor "Huawei" for product "S9700 Firmware" and version "v200r010c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | S9700 Search vendor "Huawei" for product "S9700" | - | - |
Safe
|