Authentication flaw

2017-06-0816:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.4%

JSON

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.

CPENameOperatorVersion
s5300_firmwareeq<= v200r1c0spc300
s5700_firmwareeq<= v200r1c0spc300
s6300_firmwareeq<= v200r1c0spc300
s6700_firmwareeq<= v200r1c0spc300
s7700_firmwareeq<= v200r1c0spc300
s9300_firmwareeq<= v200r1c0spc300
s9700_firmwareeq<= v200r1c0spc300

Name	Operator	Version
s5300_firmware	eq	<= v200r1c0spc300
s5700_firmware	eq	<= v200r1c0spc300
s6300_firmware	eq	<= v200r1c0spc300
s6700_firmware	eq	<= v200r1c0spc300
s7700_firmware	eq	<= v200r1c0spc300
s9300_firmware	eq	<= v200r1c0spc300
s9700_firmware	eq	<= v200r1c0spc300