CVE-2017-15315
mediumpriority · track · 26EPSS 0.008 · 56 %ileEUUSEPSS · scored 2026-10-28
Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (9)
Products and version ranges known to be affected.
- Huawei Technologies Co., Ltd. NIP6300,NIP6600,Secospace USG6300,Secospace USG6500≤ NIP6300 V500R001C20SPC100, V500R001C20SPC200,NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200enisa_euvdEU
- huawei secospace usg6300 firmware= v500r001c20spc100nvdUScpe:2.3:o:huawei:secospace_usg6300_firmware:*:*:*:*:*:*:*:*
- huawei secospace usg6300 firmware= v500r001c20spc200nvdUScpe:2.3:o:huawei:secospace_usg6300_firmware:*:*:*:*:*:*:*:*
- huawei secospace usg6500 firmware= v500r001c20spc100nvdUScpe:2.3:o:huawei:secospace_usg6500_firmware:*:*:*:*:*:*:*:*
- huawei secospace usg6500 firmware= v500r001c20spc200nvdUScpe:2.3:o:huawei:secospace_usg6500_firmware:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171129-01-command-cnPatchcnnvd
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-encnnvd
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-enenisa_euvd
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-enVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan