PT-2017-5865 · Huawei · Huawei Srg2300+4

Publicado 2017-04-02 · Atualizado 2017-04-05 · CVE-2014-3223

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei S9300 versions prior to V100R006SPH013 Huawei S2300, S3300, S5300, S6300 versions prior to V100R006SPH010

Description: The issue is related to the processing of special packets using Y.1731, which can cause the restart of switches.

Recommendations: For Huawei S9300 versions prior to V100R006SPH013, update to V100R006SPH013 or later. For Huawei S2300, S3300, S5300, S6300 versions prior to V100R006SPH010, update to V100R006SPH010 or later.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2014-3223

Produtos afetados

Huawei Srg2300

Huawei Srg3300

Huawei S5300

Huawei S6300

Huawei S9300

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-3223 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/hw-329625 · Aviso do Fabricante