CVE-2015-3913 Denial of service in n/a
Remote attackers can cause a denial of service by sending crafted ICMP requests to Huawei Campus series switches, requiring vendor patches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-3913?
CVE-2015-3913 is a high-severity denial of service vulnerability in n/a, published on 8 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
Weakness: CWE-20
Which versions are affected by CVE-2015-3913?
It affects 22 products.
Products include Huawei S12700 Firmware, Huawei S2300 Firmware, Huawei S2350ei Firmware, Huawei S2700 Firmware, Huawei S2750ei Firmware, Huawei S3300 Firmware and 16 more.
How do I fix CVE-2015-3913?
No fix has been published for CVE-2015-3913 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-3913 being exploited?
There is no known exploitation of CVE-2015-3913 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2016-4087 Command injection in n/a
- CVE-2021-22357 Denial of service in S12700;S5700;S6700;S7700
- CVE-2019-19397 Weak cryptography in S12700;S1700;S2700;S5700;S6700;S7700;S9700
- CVE-2019-5285 Denial of service in S12700, S12700, S12700, S12700, S12700, S12700, S12700, S12700, S1700, S1700, S1700, S1700, S1700, S1700, S2300, S2300, S2300, S2300, S2300, S2300, S2300, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S5300, S5300, S5300, S5300, S5300, S5300, S5300, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S600-E, S600-E, S600-E, S600-E, S600-E, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7900, S7900, S7900, S9300, S9300, S9300, S9300, S9300, S9300, S9300, S9300X, S9300X, S9300X, S9300X, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700
- CVE-2016-8786 Denial of service in S12700, S5700, S6700, S7700, S9700
Sources
Also known as GHSA-9mrr-8f9q-w3jv.