CVE-2014-4707 — HIGH (8.8) — White Hats Nepal

Vulnerability Description

Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software, bypass a Menu protection mechanism, conduct a Menu compromise attack, or bypass a Menu/upgrade protection mechanism.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Campus S7700 Firmware	v200r001c00spc300
Huawei	Campus S7700	-
Huawei	Campus S9300 Firmware	v200r001c00spc300
Huawei	Campus S9300	-
Huawei	Campus S9700 Firmware	v200r001c00spc300
Huawei	Campus S9700	-

Related Weaknesses (CWE)

CWE-284

References

http://www.huawei.com/en/psirt/security-advisories/hw-334629Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-334629Vendor Advisory

FAQ

What is CVE-2014-4707?

CVE-2014-4707 is a vulnerability with a CVSS score of 8.8 (HIGH). Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00S...

How severe is CVE-2014-4707?

CVE-2014-4707 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-4707?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Campus S7700 Firmware, Huawei Campus S7700, Huawei Campus S9300 Firmware, Huawei Campus S9300, Huawei Campus S9700 Firmware.