Lucene search

Huawei TechnologiesHUAWEI-SA-20140924-01-VRP

HistorySep 24, 2014 - 12:00 a.m.

Security Advisory-Information Leakage Vulnerability via MPLS Ping in VRP Platform

2014-09-2400:00:00

Huawei Technologies

www.huawei.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

40.5%

JSON

VRP (Versatile Routing Platform) has been developed by Huawei to provide improved IP routing services. The VRP has been widely applied to network devices, including high-end and low-end switches and routers, wireless and transmission devices.

Information leakage vulnerability exists in several devices using VRP platform, because the MPLS LSP Ping service is bound to unnecessary interfaces, which can cause the leak of IP addresses of devices (Vulnerability ID: HWPSIRT-2014-0418).

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-8570.

Affected configurations

Vulners

Node

huaweis9300MatchV100R002

huaweis9300MatchV100R003

huaweis9300MatchV100R006

huaweis9300MatchV200R001

huaweis9300MatchV200R002

huaweis9300MatchV200R003

huaweis9300MatchV200R005

huaweis9303MatchV100R002

huaweis9303MatchV100R003

huaweis9303MatchV100R006

huaweis9303MatchV200R001

huaweis9303MatchV200R002

huaweis9303MatchV200R003

huaweis9303MatchV200R005

huaweis9306MatchV100R002

huaweis9306MatchV100R003

huaweis9306MatchV100R006

huaweis9306MatchV200R001

huaweis9306MatchV200R002

huaweis9306MatchV200R003

huaweis9306MatchV200R005

huaweis9312MatchV100R002

huaweis9312MatchV100R003

huaweis9312MatchV100R006

huaweis9312MatchV200R001

huaweis9312MatchV200R002

huaweis9312MatchV200R003

huaweis9312MatchV200R005

huaweis7700MatchV100R002

huaweis7700MatchV100R003

huaweis7700MatchV100R006

huaweis7700MatchV200R001

huaweis7700MatchV200R002

huaweis7700MatchV200R003

huaweis7700MatchV200R005

huaweis7703MatchV100R002

huaweis7703MatchV100R003

huaweis7703MatchV100R006

huaweis7703MatchV200R001

huaweis7703MatchV200R002

huaweis7703MatchV200R003

huaweis7703MatchV200R005

huaweis7706MatchV100R002

huaweis7706MatchV100R003

huaweis7706MatchV100R006

huaweis7706MatchV200R001

huaweis7706MatchV200R002

huaweis7706MatchV200R003

huaweis7706MatchV200R005

huaweis7712MatchV100R002

huaweis7712MatchV100R003

huaweis7712MatchV100R006

huaweis7712MatchV200R001

huaweis7712MatchV200R002

huaweis7712MatchV200R003

huaweis7712MatchV200R005

huaweis9300MatchS9300E/

huaweis9300MatchS9303E/

huaweis9300MatchS9306E/

huaweis9300MatchS9312E/

huaweis9300MatchS9700/

huaweis9300MatchS9703/

huaweis9300MatchS9706/

huaweis9300MatchS9712

huaweis9303MatchS9300E/

huaweis9303MatchS9303E/

huaweis9303MatchS9306E/

huaweis9303MatchS9312E/

huaweis9303MatchS9700/

huaweis9303MatchS9703/

huaweis9303MatchS9706/

huaweis9303MatchS9712

huaweis9306MatchS9300E/

huaweis9306MatchS9303E/

huaweis9306MatchS9306E/

huaweis9306MatchS9312E/

huaweis9306MatchS9700/

huaweis9306MatchS9703/

huaweis9306MatchS9706/

huaweis9306MatchS9712

huaweis9312MatchS9300E/

huaweis9312MatchS9303E/

huaweis9312MatchS9306E/

huaweis9312MatchS9312E/

huaweis9312MatchS9700/

huaweis9312MatchS9703/

huaweis9312MatchS9706/

huaweis9312MatchS9712

huaweis7700MatchS9300E/

huaweis7700MatchS9303E/

huaweis7700MatchS9306E/

huaweis7700MatchS9312E/

huaweis7700MatchS9700/

huaweis7700MatchS9703/

huaweis7700MatchS9706/

huaweis7700MatchS9712

huaweis7703MatchS9300E/

huaweis7703MatchS9303E/

huaweis7703MatchS9306E/

huaweis7703MatchS9312E/

huaweis7703MatchS9700/

huaweis7703MatchS9703/

huaweis7703MatchS9706/

huaweis7703MatchS9712

huaweis7706MatchS9300E/

huaweis7706MatchS9303E/

huaweis7706MatchS9306E/

huaweis7706MatchS9312E/

huaweis7706MatchS9700/

huaweis7706MatchS9703/

huaweis7706MatchS9706/

huaweis7706MatchS9712

huaweis7712MatchS9300E/

huaweis7712MatchS9303E/

huaweis7712MatchS9306E/

huaweis7712MatchS9312E/

huaweis7712MatchS9700/

huaweis7712MatchS9703/

huaweis7712MatchS9706/

huaweis7712MatchS9712

huaweis9300MatchS12708/

huaweis9300MatchS12712

huaweis9303MatchS12708/

huaweis9303MatchS12712

huaweis9306MatchS12708/

huaweis9306MatchS12712

huaweis9312MatchS12708/

huaweis9312MatchS12712

huaweis7700MatchS12708/

huaweis7700MatchS12712

huaweis7703MatchS12708/

huaweis7703MatchS12712

huaweis7706MatchS12708/

huaweis7706MatchS12712

huaweis7712MatchS12708/

huaweis7712MatchS12712

huawei5700hiMatchV100R006

huawei5700hiMatchV200R001

huawei5700hiMatchV200R002

huawei5700hiMatchV200R003

huawei5700hiMatchV200R005

huawei5300hiMatchV100R006

huawei5300hiMatchV200R001

huawei5300hiMatchV200R002

huawei5300hiMatchV200R003

huawei5300hiMatchV200R005

huawei5700hiMatch5710EI/5310EI

huawei5300hiMatch5710EI/5310EI

huawei5700hiMatch5710HI/5310HI

huawei5300hiMatch5710HI/5310HI

huawei5700hiMatch6700EI/6300EI

huawei5300hiMatch6700EI/6300EI

CPENameOperatorVersion
s9300eqV100R002
s9300eqV100R003
s9300eqV100R006
s9300eqV200R001
s9300eqV200R002
s9300eqV200R003
s9300eqV200R005
s9303eqV100R002
s9303eqV100R003
s9303eqV100R006

Name	Operator	Version
s9300	eq	V100R002
s9300	eq	V100R003
s9300	eq	V100R006
s9300	eq	V200R001
s9300	eq	V200R002
s9300	eq	V200R003
s9300	eq	V200R005
s9303	eq	V100R002
s9303	eq	V100R003
s9303	eq	V100R006

Rows per page:

1-10 of 1521

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

40.5%

JSON

Related for HUAWEI-SA-20140924-01-VRP