CVE-2015-8677: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C...

Security readout for executives and security teams

CVE-2015-8677 is a denial-of-service flaw in multiple Huawei Campus switch families. An authenticated remote user can trigger memory consumption through HTTPS or SFTP management access, potentially causing device restart. This matters because affected switches may be core network infrastructure, so outages could disrupt business connectivity. Exposure is most likely in environments running the listed Huawei Campus switch models with vulnerable software and enabled HTTPS or SFTP management services. The attacker must be authenticated, so risk is concentrated around management-plane access, shared admin accounts, compromised credentials, or overly broad administrator access. Treat this as a network availability risk. Prioritize affected switches that support critical sites, data centers, or management networks, especially where many administrators or third parties have authenticated access. Mitigation focus: Upgrade affected Huawei switch software to the fixed SPH versions listed for each product branch.; Confirm current Huawei PSIRT guidance before scheduling production remediation.; Restrict HTTPS and SFTP management access to trusted administrative networks and users..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.