HIGH · 7.5

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlie...

Vulnerability Description

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiAc6605 Firmwareac6605_v200r001c00
HuaweiAc6605-
HuaweiAcu Firmwareacu_v200r001c00
HuaweiAcu-
HuaweiS Series Firmwarev100r006c05
HuaweiS2300-
HuaweiS2700-
HuaweiS3300-
HuaweiS3700-
HuaweiS5300 Firmware<= v200r005c00spc300
HuaweiS5300-
HuaweiS5700 Firmware<= v200r005c00spc300
HuaweiS5700-
HuaweiS6700 Firmware<= v200r005c00spc300
HuaweiS6700-
HuaweiS6300 Firmware<= v200r005c00spc300
HuaweiS6300-
HuaweiS7700 Firmware<= v200r005c00spc300
HuaweiS7700-
HuaweiS9700 Firmware<= v200r005c00spc300

Related Weaknesses (CWE)

References

FAQ

What is CVE-2014-8572?

CVE-2014-8572 is a vulnerability with a CVSS score of 7.5 (HIGH). Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlie...

How severe is CVE-2014-8572?

CVE-2014-8572 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-8572?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ac6605 Firmware, Huawei Ac6605, Huawei Acu Firmware, Huawei Acu, Huawei S Series Firmware.