NetSight
high7.5

CVE-2014-4706

Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SP…

Impact

Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.

Affected products

VendorProductAffected versions
HuaweiCampus S3700hi Firmware
Version v200r001c00spc300
HuaweiS5700 Firmware
Versions v200r001c00spc300, v200r003c00spc300
HuaweiS6700 Firmware
Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300
HuaweiS3300hi Firmware
Version v200r001c00spc300
HuaweiS5300 Firmware
Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300
HuaweiS6300 Firmware
Versions v200r001c00spc300, v200r002c00spc100, v200r003c00spc300
HuaweiS9300 Firmware
Versions v200r001c00spc300, v200r003c00spc300, v200r003c00spc500
HuaweiS7700 Firmware
Version v200r001c00spc300
HuaweiLsw S9700 Firmware
Versions v200r001c00spc300, v200r003c00spc300, v200r003c00spc500
HuaweiCampus S5700 Firmware
Version v200r002c00spc100
HuaweiCampus S7700 Firmware
Versions v200r003c00spc300, v200r003c00spc500
HuaweiS9300e Firmware
Versions v200r003c00spc300, v200r003c00spc500

Weakness classification

References