CVE-2014-8570 — MEDIUM (5.3)

Vulnerability Description

Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S12712 with software V200R005; 5700HI, 5300HI with software V100R006, V200R001, V200R002, V200R003, V200R005; 5710EI, 5310EI with software V200R002, V200R003, V200R005; 5710HI, 5310HI with software V200R003, V200R005; 6700EI, 6300EI with software V200R005 could cause a leak of IP addresses of devices, related to unintended interface support for VRP MPLS LSP Ping.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Huawei	S9300 Firmware	v100r002
Huawei	S9300	-
Huawei	S9303 Firmware	v100r002
Huawei	S9303	-
Huawei	S9306 Firmware	v100r002
Huawei	S9306	-
Huawei	S9312 Firmware	v100r002
Huawei	S9312	-
Huawei	S7700 Firmware	v100r002
Huawei	S7700	-
Huawei	S7703 Firmware	v100r002
Huawei	S7703	-
Huawei	S7706 Firmware	v100r002
Huawei	S7706	-
Huawei	S7712 Firmware	v100r002
Huawei	S7712	-
Huawei	S9300E Firmware	v200r001
Huawei	S9300E	-
Huawei	S9303E Firmware	v200r001
Huawei	S9303E	-

Related Weaknesses (CWE)

CWE-200

References

http://www.huawei.com/en/psirt/security-advisories/hw-372145Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-372145Vendor Advisory

FAQ

What is CVE-2014-8570?

CVE-2014-8570 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with softw...

How severe is CVE-2014-8570?

CVE-2014-8570 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-8570?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei S9300 Firmware, Huawei S9300, Huawei S9303 Firmware, Huawei S9303, Huawei S9306 Firmware.