PT-2013-5110 · Huawei · Huawei Ar3200+4

Roberto Paleari · Published 2013-06-20 · Updated 2013-06-21 · CVE-2013-4631

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei AR routers versions (affected versions not specified, but includes 150, 200, 1200, 2200, and 3200)

Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, by sending malformed SNMPv3 requests. This is due to unspecified overflow issues when SNMPv3 is enabled.

Recommendations For Huawei AR 150, 200, 1200, 2200, and 3200 routers, consider disabling SNMPv3 until a fix is available to prevent remote attackers from causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-4631

Affected Products

Huawei Ar1200

Huawei Ar150

Huawei Ar200

Huawei Ar2200

Huawei Ar3200

References · 3

• 🔥 https://exploit-db.com/exploits/25295 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4631 · Security Note
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-260601.htm · Vendor Advisory