CVE-2015-8675 in S5300 Campus

Summary

Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive password information by reading the display.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/25/2015
• Disclosure: 01/15/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-80282
• CPE: ready
• CWE: CWE-255 (Confirmed)
• CVSS: 6.2
• EPSS: 0.00030
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8675
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8675
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8675/