high7.5
CVE-2014-4705
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150,…
Impact
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | S9300 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| Huawei | S9700 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| Huawei | S7700 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| Huawei | S5300 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| Huawei | S5700 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| Huawei | S6300 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| Huawei | S6700 Firmware | Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| Huawei | Ar150 Firmware | Versions v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100 |
| Huawei | Ar160 Firmware | Versions v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100 |
| Huawei | Ar200 Firmware | Versions v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100 |
| Huawei | Ar1200 Firmware | Versions v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100 |
| Huawei | Ar2200 Firmware | Versions v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100 |