Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20141009-01-E5332
HistoryOct 09, 2014 - 12:00 a.m.

Security Advisory-Memory Overflow Vulnerabilities on Huawei E5332 Webserver

2014-10-0900:00:00
Huawei Technologies
www.huawei.com
14

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.2%

Huawei E5332 wireless router has the following two memory overflow vulnerabilities:

Memory overflow occurs when the E5332 Webserver parses a specially crafted HTTP request message, causing the device reboot (Vulnerability ID: HWPSIRT-2014-0861). This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-5327.

Memory overflow occurs when the E5332 Webserver parses a specially crafted Application Programming Interface (API) service request message, causing the device reboot (Vulnerability ID: HWPSIRT-2014-0862). This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-5328.

Affected configurations

Vulners
Node
huaweie5332Match21.344.19.00.1080

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.2%

Related for HUAWEI-SA-20141009-01-E5332