Vulnerability Intelligence Report
CVE-2014-4705
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:1.49%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| huawei | s9300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| huawei | s9300 | all |
| huawei | s9700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| huawei | s9700 | all |
| huawei | s7700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 |
| huawei | s7700 | all |
| huawei | s5300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| huawei | s5300 | all |
| huawei | s5700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| huawei | s5700 | all |
| huawei | s6300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| huawei | s6300 | all |
| huawei | s6700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 |
| huawei | s6700 | all |
| huawei | ar150_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar150 | all |
| huawei | ar160_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar160 | all |
| huawei | ar200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar200 | all |
| huawei | ar1200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar1200 | all |
| huawei | ar2200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar2200 | all |
| huawei | ar3200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar3200 | all |
| huawei | ar530_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | ar530 | all |
| huawei | netengine16ex_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | netengine16ex | all |
| huawei | srg1300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | srg1300 | all |
| huawei | srg2300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | srg2300 | all |
| huawei | srg3300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 |
| huawei | srg3300 | all |
| huawei | wlan_ac6005_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c00spc300, v200r003c00spc500, v200r005c00spc100 |
| huawei | wlan_ac6005 | all |
| huawei | wlan_ac6605_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c00spc300, v200r003c00spc500, v200r005c00spc100 |
| huawei | wlan_ac6605 | all |
| huawei | wlan_acu2_firmware | v200r005c00spc100 |
| huawei | wlan_acu2 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.492%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2014-07-01T00:00:00 |
| Published | 2018-01-30T17:00:00 |
| Patch Date | 2014-06-16 |
| Last Updated | 2024-08-06T11:27:36 |
Community Chatter & Buzz