PT-2017-5866 · Huawei · Quidway S5700+6

Published 2017-04-02 · Updated 2017-04-05 · CVE-2014-3224

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Quidway S9700 version V200R003C00SPC500 Huawei Quidway S9300 version V200R003C00SPC500 Huawei Quidway S7700 version V200R003C00SPC500 Huawei Quidway S6700 version V200R003C00SPC300 Huawei Quidway S6300 version V200R003C00SPC300 Huawei Quidway S5700 version V200R003C00SPC300 Huawei Quidway S5300 version V200R003C00SPC300

Description: The issue allows attackers to launch Denial of Service (DoS) attacks by sending malformed packets to the affected products.

Recommendations: For Huawei Quidway S9700 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S9300 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S7700 version V200R003C00SPC500, update to a fixed version. For Huawei Quidway S6700 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S6300 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S5700 version V200R003C00SPC300, update to a fixed version. For Huawei Quidway S5300 version V200R003C00SPC300, update to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-3224

Affected Products

Quidway S5300

Quidway S5700

Quidway S6300

Quidway S6700

Quidway S7700

Quidway S9300

Quidway S9700

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-3224 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-333184 · Vendor Advisory