{"id":"CVE-2015-5434","aliases":["EUVD-2015-5390","GHSA-c9pv-4v8h-fhc4"],"status":"published","title":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote...","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02048,"percentile":0.81348,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2016-01-05T11:00:00Z","modified":"2026-06-17T00:29:07Z","products":[{"vendor":"hp","product":"jc072b_hp_12500_main_processing_unit"},{"vendor":"hp","product":"jc085a_hp_a12518_switch_chassis"},{"vendor":"hp","product":"jc086a_hp_a12508_switch_chassis"},{"vendor":"hp","product":"jc124a_hp_a9508_switch_chassis"},{"vendor":"hp","product":"jc124b_hp_9505_switch_chassis"},{"vendor":"hp","product":"jc125a_hp_a9512_switch_chassis"},{"vendor":"hp","product":"jc125b_hp_9512_switch_chassis"},{"vendor":"hp","product":"jc474a_hp_a9508-v_switch_chassis"},{"vendor":"hp","product":"jc474b_hp_9508-v_switch_chassis"},{"vendor":"hp","product":"jc611a_hp_10508-v_switch_chassis"},{"vendor":"hp","product":"jc612a_hp_10508_switch_chassis"},{"vendor":"hp","product":"jc613a_hp_10504_switch_chassis"},{"vendor":"hp","product":"jc652a_hp_12508_dc_switch_chassis"},{"vendor":"hp","product":"jc653a_hp_12518_dc_switch_chassis"},{"vendor":"hp","product":"jc654a_hp_12504_ac_switch_chassis"},{"vendor":"hp","product":"jc655a_hp_12504_dc_switch_chassis"},{"vendor":"hp","product":"jc748a_hp_10512_switch_chassis"},{"vendor":"hp","product":"jc808a_hp_12500_taa_main_processing_unit"},{"vendor":"hp","product":"jf430a_hp_a12518_switch_chassis"},{"vendor":"hp","product":"jf430b_hp_12518_switch_chassis"},{"vendor":"hp","product":"jf430c_hp_12518_ac_switch_chassis"},{"vendor":"hp","product":"jf431a_hp_a12508_switch_chassis"},{"vendor":"hp","product":"jf431b_hp_12508_switch_chassis"},{"vendor":"hp","product":"jf431c_hp_12508_ac_switch_chassis"},{"vendor":"hp","product":"jg296a_hp_5920af-24xg_switch"},{"vendor":"hp","product":"jg353a_hp_hsr6602-g_router"},{"vendor":"hp","product":"jg354a_hp_hsr6602-xg_router"},{"vendor":"hp","product":"jg361a_hp_hsr6802_router_chassis"},{"vendor":"hp","product":"jg361b_hp_hsr6802_router_chassis"},{"vendor":"hp","product":"jg362a_hp_hsr6804_router_chassis"},{"vendor":"hp","product":"jg362b_hp_hsr6804_router_chassis"},{"vendor":"hp","product":"jg363a_hp_hsr6808_router_chassis"},{"vendor":"hp","product":"jg363b_hp_hsr6808_router_chassis"},{"vendor":"hp","product":"jg364a_hp_hsr6800_rse-x2_router_main_processing_unit"},{"vendor":"hp","product":"jg402a_hp_msr4080_router_chassis"},{"vendor":"hp","product":"jg403a_hp_msr4060_router_chassis"},{"vendor":"hp","product":"jg404a_hp_msr3064_router"},{"vendor":"hp","product":"jg405a_hp_msr3044_router"},{"vendor":"hp","product":"jg406a_hp_msr3024_ac_router"},{"vendor":"hp","product":"jg407a_hp_msr3024_dc_router"},{"vendor":"hp","product":"jg408a_hp_msr3024_poe_router"},{"vendor":"hp","product":"jg409a_hp_msr3012_ac_router"},{"vendor":"hp","product":"jg410a_hp_msr3012_dc_router"},{"vendor":"hp","product":"jg411a_hp_msr2003_ac_router"},{"vendor":"hp","product":"jg412a_hp_msr4000_mpu-100_main_processing_unit"},{"vendor":"hp","product":"jg496a_hp_10500_type_a_mpu_with_comware"},{"vendor":"hp","product":"jg497a_hp_12500_mpu_w\\/comware"},{"vendor":"hp","product":"jg555a_hp_5920af-24xg_taa_switch"},{"vendor":"hp","product":"jg734a_hp_msr2004-24_ac_router"},{"vendor":"hp","product":"jg735a\\)_hp_msr2004-48_router"},{"vendor":"hp","product":"jg776a_hp_hsr6602-g_taa-compliant_router"},{"vendor":"hp","product":"jg777a_hp_hsr6602-xg_taa-compliant_router"},{"vendor":"hp","product":"jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unit"},{"vendor":"hp","product":"jg782a_hp_ff_12508e_ac_switch_chassis"},{"vendor":"hp","product":"jg783a_hp_ff_12508e_dc_switch_chassis"},{"vendor":"hp","product":"jg784a_hp_ff_12518e_ac_switch_chassis"},{"vendor":"hp","product":"jg785a_hp_ff_12518e_dc_switch_chassis"},{"vendor":"hp","product":"jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fd"},{"vendor":"hp","product":"jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taa"},{"vendor":"hp","product":"jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fg"},{"vendor":"hp","product":"jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taa"},{"vendor":"hp","product":"jg798a_hp_flexfabric_12508e_fabric"},{"vendor":"hp","product":"jg802a_hp_ff_12500e_mpu"},{"vendor":"hp","product":"jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unit"},{"vendor":"hp","product":"jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluation"},{"vendor":"hp","product":"jg811aae_hp_vsr1001_comware_7_virtual_services_router"},{"vendor":"hp","product":"jg812aae_hp_vsr1004_comware_7_virtual_services_router"},{"vendor":"hp","product":"jg813aae_hp_vsr1008_comware_7_virtual_services_router"},{"vendor":"hp","product":"jg820a_hp_10504_taa_switch_chassis"},{"vendor":"hp","product":"jg821a_hp_10508_taa_switch_chassis"},{"vendor":"hp","product":"jg822a_hp_10508-v_taa_switch_chassis"},{"vendor":"hp","product":"jg823a_hp_10512_taa_switch_chassis"},{"vendor":"hp","product":"jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis"},{"vendor":"hp","product":"jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassis"},{"vendor":"hp","product":"jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassis"},{"vendor":"hp","product":"jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassis"},{"vendor":"hp","product":"jg861a_hp_msr3024_taa-compliant_ac_router"},{"vendor":"hp","product":"jg866a_hp_msr2003_taa-compliant_ac_router"},{"vendor":"hp","product":"jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unit"},{"vendor":"hp","product":"jg875a_hp_msr1002-4_ac_router"},{"vendor":"hp","product":"jh060a_hp_msr1003-8s_ac_router"},{"vendor":"hp","product":"jh075a\\)_hp_hsr6800_rse-x3_router_main_processing_unit"},{"vendor":"hp","product":"jh179a_hp_flexfabric_5930_4-slot_switch"},{"vendor":"hp","product":"jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switch"},{"vendor":"hp","product":"jh192a_hp_10500_48-port_gig-t_\\(rj45\\)_se"},{"vendor":"hp","product":"jh196a_hp_10500_2-port_100gbe_cfp_ec"},{"vendor":"hp","product":"jh198a_hp_10500_type_d_main_processing_unit_with_comware"}],"references":[{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79869","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5434"},{"url":"https://github.com/advisories/GHSA-c9pv-4v8h-fhc4"}],"sources":{"cve":[{"id":"CVE-2015-5434","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","status":"published","published":"2016-01-05T11:00:00Z","modified":"2024-08-06T06:50:01.997Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2015-5390","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","status":"published","published":"2016-01-05T11:00:00Z","modified":"2024-08-06T06:50:01Z","updated_at":"2026-11-03T02:22:00.305488Z"}],"ghsa":[{"id":"GHSA-c9pv-4v8h-fhc4","title":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote...","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","status":"published","published":"2022-05-17T03:44:34Z","modified":"2023-01-27T05:08:34Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T14:43:18.939561Z"}],"nvd":[{"id":"CVE-2015-5434","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","status":"published","published":"2016-01-05T11:59:00.097Z","modified":"2026-06-17T00:29:07.473Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:15.746629Z"}]}}