{"cve":"CVE-2015-5434","nvd":{"published":"2016-01-05T11:59:00.097","modified":"2026-06-17T00:29:07.473","status":"Modified","description":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\"","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","score":6.5},"cwes":["CWE-264"],"references":["http://www.securityfocus.com/bid/79869","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492","http://www.securityfocus.com/bid/79869","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492"],"products":["hp:jc072b_hp_12500_main_processing_unit","hp:jc085a_hp_a12518_switch_chassis","hp:jc086a_hp_a12508_switch_chassis","hp:jc124a_hp_a9508_switch_chassis","hp:jc124b_hp_9505_switch_chassis","hp:jc125a_hp_a9512_switch_chassis","hp:jc125b_hp_9512_switch_chassis","hp:jc474a_hp_a9508-v_switch_chassis","hp:jc474b_hp_9508-v_switch_chassis","hp:jc611a_hp_10508-v_switch_chassis","hp:jc612a_hp_10508_switch_chassis","hp:jc613a_hp_10504_switch_chassis","hp:jc652a_hp_12508_dc_switch_chassis","hp:jc653a_hp_12518_dc_switch_chassis","hp:jc654a_hp_12504_ac_switch_chassis","hp:jc655a_hp_12504_dc_switch_chassis","hp:jc748a_hp_10512_switch_chassis","hp:jc808a_hp_12500_taa_main_processing_unit","hp:jf430a_hp_a12518_switch_chassis","hp:jf430b_hp_12518_switch_chassis","hp:jf430c_hp_12518_ac_switch_chassis","hp:jf431a_hp_a12508_switch_chassis","hp:jf431b_hp_12508_switch_chassis","hp:jf431c_hp_12508_ac_switch_chassis","hp:jg296a_hp_5920af-24xg_switch","hp:jg353a_hp_hsr6602-g_router","hp:jg354a_hp_hsr6602-xg_router","hp:jg361a_hp_hsr6802_router_chassis","hp:jg361b_hp_hsr6802_router_chassis","hp:jg362a_hp_hsr6804_router_chassis","hp:jg362b_hp_hsr6804_router_chassis","hp:jg363a_hp_hsr6808_router_chassis","hp:jg363b_hp_hsr6808_router_chassis","hp:jg364a_hp_hsr6800_rse-x2_router_main_processing_unit","hp:jg402a_hp_msr4080_router_chassis","hp:jg403a_hp_msr4060_router_chassis","hp:jg404a_hp_msr3064_router","hp:jg405a_hp_msr3044_router","hp:jg406a_hp_msr3024_ac_router","hp:jg407a_hp_msr3024_dc_router","hp:jg408a_hp_msr3024_poe_router","hp:jg409a_hp_msr3012_ac_router","hp:jg410a_hp_msr3012_dc_router","hp:jg411a_hp_msr2003_ac_router","hp:jg412a_hp_msr4000_mpu-100_main_processing_unit","hp:jg496a_hp_10500_type_a_mpu_with_comware","hp:jg497a_hp_12500_mpu_w\\/comware","hp:jg555a_hp_5920af-24xg_taa_switch","hp:jg734a_hp_msr2004-24_ac_router","hp:jg735a\\)_hp_msr2004-48_router"],"source":"nvd","synced_at":"2026-10-19T20:37:48.328043465+00:00"},"epss":{"cve":"CVE-2015-5434","score":0.02048,"percentile":0.81217,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}