Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with…
Priority LOW 23CWE-326Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-326.
Summary
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.
Why it matters now
EPSS 0.00489 42nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:s9300_firmware:v200r005c00spc300:*:*:*:*:*:*:* | v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc500:*:*:*:*:*:*:* | v200r006c00spc500 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:* | v200r005c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:* | v200r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:quidway_s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:* | v200r001c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:quidway_s9300_firmware:v200r002c00spc100:*:*:*:*:*:*:* | v200r002c00spc100 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:quidway_s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:* | v200r003c00spc500 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:quidway_s9300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:s9300_firmware:v200r005c00spc300:*:*:*:*:*:*:* Versions v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc500:*:*:*:*:*:*:* Versions v200r006c00spc500 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:* Versions v200r005c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:* Versions v200r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:quidway_s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:* Versions v200r001c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:quidway_s9300_firmware:v200r002c00spc100:*:*:*:*:*:*:* Versions v200r002c00spc100 Vulnerable ·Huawei
- cpe:2.3:o:huawei:quidway_s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:* Versions v200r003c00spc500 Vulnerable ·Huawei
- cpe:2.3:h:huawei:quidway_s9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ar_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar_firmware:v200r005c10:*:*:*:*:*:*:* | v200r005c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar_firmware:v200r005c20:*:*:*:*:*:*:* | v200r005c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar_firmware:v200r005c30:*:*:*:*:*:*:* | v200r005c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:quidway_s5300_firmware:v200r001c00spc300:*:*:*:*:*:*:* | v200r001c00spc300 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:quidway_s5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:* | v200r001c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:* | v200r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:* | v200r003c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:* | v200r005c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:* | v200r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r002c00:*:*:*:*:*:*:* | v200r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r005c00spc500:*:*:*:*:*:*:* | v200r005c00spc500 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r006c00spc500:*:*:*:*:*:*:* | v200r006c00spc500 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:ar_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar_firmware:v200r005c10:*:*:*:*:*:*:* Versions v200r005c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar_firmware:v200r005c20:*:*:*:*:*:*:* Versions v200r005c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar_firmware:v200r005c30:*:*:*:*:*:*:* Versions v200r005c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:quidway_s5300_firmware:v200r001c00spc300:*:*:*:*:*:*:* Versions v200r001c00spc300 Vulnerable ·Huawei
- cpe:2.3:h:huawei:quidway_s5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:* Versions v200r001c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:* Versions v200r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:* Versions v200r003c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:* Versions v200r005c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:* Versions v200r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r002c00:*:*:*:*:*:*:* Versions v200r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r005c00spc500:*:*:*:*:*:*:* Versions v200r005c00spc500 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r006c00spc500:*:*:*:*:*:*:* Versions v200r006c00spc500 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-8085
- 2026-10-03 Alias added: GHSA-8cgg-hm22-rfwq
References
More Huawei Ar Firmware vulnerabilities
- TI-2016-05925 Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200… CVSS 3.0MEDIUM 6.5
- TI-2015-06729 Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with… CVSS 3.0MEDIUM 4.9
- TI-2015-06782 Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200… CVSS 2.0MEDIUM 4.0
Sources
- CVE-2015-8085 · CVE Program
- CVE-2015-8085 · NVD
- FIRST EPSS
- GHSA-8cgg-hm22-rfwq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences