Lucene search

[email protected]CVE-2014-3223

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2014-3223

2017-04-0220:59:00

CWE-19

[email protected]

web.nvd.nist.gov

huawei

s9300

s2300

s3300

s5300

s6300

v100r006sph013

v100r006sph010

y.1731

vulnerability

packet processing

restart

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

46.2%

JSON

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches.

Affected configurations

NVD

Node

huaweis9300_firmwareMatchv100r006c00spc500

huaweis9300_firmwareMatchv100r006c00spc800

AND

huaweis9300Match-

Node

huaweis3300_firmwareMatchv100r006c00spc800

huaweis3300_firmwareMatchv100r006c01spc100

huaweis3300_firmwareMatchv100r006c03

AND

huaweis3300Match-

Node

huaweis2300_firmwareMatchv100r006c00spc800

huaweis2300_firmwareMatchv100r006c01spc100

huaweis2300_firmwareMatchv100r006c03

AND

huaweis2300Match-

Node

huaweis5300_firmwareMatchv100r006c00spc800

huaweis5300_firmwareMatchv100r006c01spc100

huaweis5300_firmwareMatchv100r006c03

AND

huaweis5300Match-

Node

huaweis6300_firmwareMatchv100r006c00spc800

huaweis6300_firmwareMatchv100r006c01spc100

huaweis6300_firmwareMatchv100r006c03

AND

huaweis6300Match-

CPENameOperatorVersion
huawei:s9300_firmwarehuawei s9300 firmwareeqv100r006c00spc500
huawei:s9300_firmwarehuawei s9300 firmwareeqv100r006c00spc800

CPE	Name	Operator	Version
huawei:s9300_firmware	huawei s9300 firmware	eq	v100r006c00spc500
huawei:s9300_firmware	huawei s9300 firmware	eq	v100r006c00spc800

CNA Affected

[
  {
    "product": "S9300,S2300,S3300,S5300,S6300 S9300 with software V100R006C00SPC500??S9300 with software V100R006C00SPC800,S2300,S3300,S5300,S6300 with software V100R006C00SPC800,V100R006C01SPC100, V100R006C03",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "S9300,S2300,S3300,S5300,S6300 S9300 with software V100R006C00SPC500??S9300 with software V100R006C00SPC800,S2300,S3300,S5300,S6300 with software V100R006C00SPC800,V100R006C01SPC100, V100R006C03"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/hw-329625

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

46.2%

JSON

Related for CVE-2014-3223

prion1 cvelist1 nessus1 huawei1 nvd1