PT-2017-5866 · Huawei · Quidway S5700+6

Publicado 2017-04-02 · Atualizado 2017-04-05 · CVE-2014-3224

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Quidway S9700 version V200R003C00SPC500 Huawei Quidway S9300 version V200R003C00SPC500 Huawei Quidway S7700 version V200R003C00SPC500 Huawei Quidway S6700 version V200R003C00SPC300 Huawei Quidway S6300 version V200R003C00SPC300 Huawei Quidway S5700 version V200R003C00SPC300 Huawei Quidway S5300 version V200R003C00SPC300

Description: The issue allows attackers to launch Denial of Service (DoS) attacks by sending malformed packets to the affected products.

Recommendations: For Huawei Quidway S9700 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S9300 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S7700 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S6700 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S6300 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S5700 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S5300 version V200R003C00SPC300, update to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-3224

Produtos afetados

Quidway S5300

Quidway S5700

Quidway S6300

Quidway S6700

Quidway S7700

Quidway S9300

Quidway S9700

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-3224 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/hw-333184 · Aviso do Fabricante