CVE-2014-9695

8.8HIGH

Key Information:

Vendor
Huawei
Status
Tecal E9000 Chassis V100r001c00spc160 And Earlier Versions
Vendor
CVE Published:
2 April 2017

Summary

The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user.

Affected Version(s)

Tecal E9000 Chassis V100R001C00SPC160 and earlier Tecal E9000 Chassis V100R001C00SPC160 and earlier versions

References

http://www.huawei.com/en/psirt/security-advisories/hw-408118
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.