VulnerabilityModified
CVE-2015-5434
HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."
MEDIUM 6.5EPSS 2.05%
Does this matter?
Lower severity and a low EPSS score (2.05%). Track it; it rarely justifies an emergency change on its own.
Description
HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- EPSS
- 2.05% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- hp/jg786a hp flexfabric 12500 4-port 100gbe cfp fd · hp/jg787a hp flexfabric 12500 4-port 100gbe cfp fd taa · hp/jg788a hp flexfabric 12500 4-port 100gbe cfp fg · hp/jg789a hp flexfabric 12500 4-port 100gbe cfp fg taa · hp/jg798a hp flexfabric 12508e fabric · hp/jg810aae hp vsr1001 virtual services router 60 day evaluation · hp/jh192a hp 10500 48-port gig-t \(rj45\) se · hp/jh196a hp 10500 2-port 100gbe cfp ec · hp/jc072b hp 12500 main processing unit · hp/jc085a hp a12518 switch chassis · hp/jc086a hp a12508 switch chassis · hp/jc124a hp a9508 switch chassis · hp/jc124b hp 9505 switch chassis · hp/jc125a hp a9512 switch chassis · hp/jc125b hp 9512 switch chassis · hp/jc474a hp a9508-v switch chassis · hp/jc474b hp 9508-v switch chassis · hp/jc611a hp 10508-v switch chassis · hp/jc612a hp 10508 switch chassis · hp/jc613a hp 10504 switch chassis · +40 more
- Source
- hp-security-alert@hp.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.