Remote Denial of Service Vulnerability in Huawei Network Devices
CVE-2014-8572

7.5HIGH

Key Information:

Vendor
Huawei
Status
Ac6605,ac6605,acu,s2300, S3300,s2700, S3700,s5300, S5700,s6300, S6700,s7700, S9300,s9300e, S9700, Ac6605 Ac6605 V200r001c00, Ac6605 V200r002c00,acu Acu V200r001c00, Acu V200r002c00,s2300, S3300, V100r006c05 And Earlier Versions,s2700, S3700,s5300, S5700, V100r006,?s6300, S6700 V200r001, V200r002, V200r003, V200r005c00spc300 And Earlier Versions,s7700, S9300, V100r006,s9300e, S9700 V200r001, V200r002, V200r003, V200r005c00spc300 And Earlier Versions,
Vendor
CVE Published:
2 April 2017

Summary

A vulnerability in Huawei network devices allows remote attackers to exploit a weakness by sending a specially crafted SSH packet. This attack results in a denial of service, undermining the availability of the affected devices. Several models across various software versions are impacted, potentially causing significant disruption for network environments utilizing these infrastructures.

Affected Version(s)

AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier ,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier ,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier , AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,

References

http://www.huawei.com/en/psirt/security-advisories/hw-373182
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.