Lucene search

[email protected]CVE-2014-4706

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2014-4706

2017-04-0220:59:00

CWE-119

[email protected]

web.nvd.nist.gov

huawei

campus

lsw

switch

v200r001c00spc300

v200r002c00spc100

v200r003c00spc300

v200r003c00spc500

dos

heap overflow

cve-2014-4706

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

47.8%

JSON

Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.

CPENameOperatorVersion
huawei:campus_s3700hi_firmwarehuawei campus s3700hi firmwareeqv200r001c00spc300
huawei:s5700_firmwarehuawei s5700 firmwareeqv200r001c00spc300
huawei:s6700_firmwarehuawei s6700 firmwareeqv200r001c00spc300
huawei:s3300hi_firmwarehuawei s3300hi firmwareeqv200r001c00spc300
huawei:s5300_firmwarehuawei s5300 firmwareeqv200r001c00spc300
huawei:s6300_firmwarehuawei s6300 firmwareeqv200r001c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r001c00spc300
huawei:s7700_firmwarehuawei s7700 firmwareeqv200r001c00spc300
huawei:lsw_s9700_firmwarehuawei lsw s9700 firmwareeqv200r001c00spc300
huawei:campus_s5700_firmwarehuawei campus s5700 firmwareeqv200r002c00spc100

CPE	Name	Operator	Version
huawei:campus_s3700hi_firmware	huawei campus s3700hi firmware	eq	v200r001c00spc300
huawei:s5700_firmware	huawei s5700 firmware	eq	v200r001c00spc300
huawei:s6700_firmware	huawei s6700 firmware	eq	v200r001c00spc300
huawei:s3300hi_firmware	huawei s3300hi firmware	eq	v200r001c00spc300
huawei:s5300_firmware	huawei s5300 firmware	eq	v200r001c00spc300
huawei:s6300_firmware	huawei s6300 firmware	eq	v200r001c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r001c00spc300
huawei:s7700_firmware	huawei s7700 firmware	eq	v200r001c00spc300
huawei:lsw_s9700_firmware	huawei lsw s9700 firmware	eq	v200r001c00spc300
huawei:campus_s5700_firmware	huawei campus s5700 firmware	eq	v200r002c00spc100

Rows per page:

1-10 of 271

References

www.huawei.com/en/psirt/security-advisories/hw-343218

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

47.8%

JSON

Related for CVE-2014-4706

cvelist1 huawei1 prion1