PT-2013-5110 · Huawei · Huawei Ar3200+4

Roberto Paleari · Publicado 2013-06-20 · Atualizado 2013-06-21 · CVE-2013-4631

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei AR routers versions (affected versions not specified, but includes 150, 200, 1200, 2200, and 3200)

Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, by sending malformed SNMPv3 requests. This is due to unspecified overflow issues when SNMPv3 is enabled.

Recommendations For Huawei AR 150, 200, 1200, 2200, and 3200 routers, consider disabling SNMPv3 until a fix is available to prevent remote attackers from causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4631

Produtos afetados

Huawei Ar1200

Huawei Ar150

Huawei Ar200

Huawei Ar2200

Huawei Ar3200

Referências · 3

• 🔥 https://exploit-db.com/exploits/25295 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4631 · Nota de Segurança
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-260601.htm · Aviso do Fabricante