Vulnerability Description
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | S9300 Firmware | v200r001c00spc300 |
| Huawei | S9300 | - |
| Huawei | S9700 Firmware | v200r001c00spc300 |
| Huawei | S9700 | - |
| Huawei | S7700 Firmware | v200r001c00spc300 |
| Huawei | S7700 | - |
| Huawei | S5300 Firmware | v200r001c00spc300 |
| Huawei | S5300 | - |
| Huawei | S5700 Firmware | v200r001c00spc300 |
| Huawei | S5700 | - |
| Huawei | S6300 Firmware | v200r001c00spc300 |
| Huawei | S6300 | - |
| Huawei | S6700 Firmware | v200r001c00spc300 |
| Huawei | S6700 | - |
| Huawei | Ar150 Firmware | v200r003c00spc100 |
| Huawei | Ar150 | - |
| Huawei | Ar160 Firmware | v200r003c00spc100 |
| Huawei | Ar160 | - |
| Huawei | Ar200 Firmware | v200r003c00spc100 |
| Huawei | Ar200 | - |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/59349Permissions Required
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hVendor Advisory
- http://secunia.com/advisories/59349Permissions Required
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hVendor Advisory
FAQ
What is CVE-2014-4705?
CVE-2014-4705 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR...
How severe is CVE-2014-4705?
CVE-2014-4705 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-4705?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei S9300 Firmware, Huawei S9300, Huawei S9700 Firmware, Huawei S9700, Huawei S7700 Firmware.