SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2015-7846

Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.

MEDIUM 4.6EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.

CVSS 3.0
4.6 MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.26% probability · 18th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
huawei/s9300 firmware · huawei/s9700 firmware · huawei/s7700 firmware · huawei/ar200 firmware · huawei/ar1200 firmware · huawei/ar2200 firmware · huawei/ar3200 firmware
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.