PT-2017-5865 · Huawei · Huawei Srg2300+4

Published 2017-04-02 · Updated 2017-04-05 · CVE-2014-3223

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei S9300 versions prior to V100R006SPH013 Huawei S2300, S3300, S5300, S6300 versions prior to V100R006SPH010

Description: The issue is related to the processing of special packets using Y.1731, which can cause the restart of switches.

Recommendations: For Huawei S9300 versions prior to V100R006SPH013, update to V100R006SPH013 or later. For Huawei S2300, S3300, S5300, S6300 versions prior to V100R006SPH010, update to V100R006SPH010 or later.

Fix

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2014-3223

Affected Products

Huawei Srg2300

Huawei Srg3300

Huawei S5300

Huawei S6300

Huawei S9300

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-3223 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-329625 · Vendor Advisory