Lucene search

HuaweiCVE-2014-8572

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2014-8572

2017-04-0220:59:00

CWE-20

huawei

web.nvd.nist.gov

huawei

ac6605

acu

s2300

s3300

s2700

s3700

s5300

s5700

s6300

s6700

s7700

s9300

s9300e

s9700

vrp

ssh

denial of service

cve-2014-8572

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

Affected configurations

Nvd

Node

huaweiac6605_firmwareMatchac6605_v200r001c00

huaweiac6605_firmwareMatchac6605_v200r002c00

AND

huaweiac6605Match-

Node

huaweiacu_firmwareMatchacu_v200r001c00

huaweiacu_firmwareMatchacu_v200r002c00

AND

huaweiacuMatch-

Node

huaweis_series_firmwareMatchv100r006c05

AND

huaweis2300Match-

huaweis2700Match-

huaweis3300Match-

huaweis3700Match-

Node

huaweis5300_firmwareRange≤v200r005c00spc300

huaweis5300_firmwareMatchv100r006

huaweis5300_firmwareMatchv200r001

huaweis5300_firmwareMatchv200r002

huaweis5300_firmwareMatchv200r003

AND

huaweis5300Match-

Node

huaweis5700_firmwareRange≤v200r005c00spc300

huaweis5700_firmwareMatchv100r006

huaweis5700_firmwareMatchv200r001

huaweis5700_firmwareMatchv200r002

huaweis5700_firmwareMatchv200r003

AND

huaweis5700Match-

Node

huaweis6700_firmwareRange≤v200r005c00spc300

huaweis6700_firmwareMatchv100r006

huaweis6700_firmwareMatchv200r001

huaweis6700_firmwareMatchv200r002

huaweis6700_firmwareMatchv200r003

AND

huaweis6700Match-

Node

huaweis6300_firmwareRange≤v200r005c00spc300

huaweis6300_firmwareMatchv100r006

huaweis6300_firmwareMatchv200r001

huaweis6300_firmwareMatchv200r002

huaweis6300_firmwareMatchv200r003

AND

huaweis6300Match-

Node

huaweis7700_firmwareRange≤v200r005c00spc300

huaweis7700_firmwareMatchv100r006

huaweis7700_firmwareMatchv200r001

huaweis7700_firmwareMatchv200r002

huaweis7700_firmwareMatchv200r003

AND

huaweis7700Match-

Node

huaweis9700_firmwareRange≤v200r005c00spc300

huaweis9700_firmwareMatchv100r006

huaweis9700_firmwareMatchv200r001

huaweis9700_firmwareMatchv200r002

huaweis9700_firmwareMatchv200r003

AND

huaweis9700Match-

Node

huaweis9300_firmwareRange≤v200r005c00spc300

huaweis9300_firmwareMatchv100r006

huaweis9300_firmwareMatchv200r001

huaweis9300_firmwareMatchv200r002

huaweis9300_firmwareMatchv200r003

AND

huaweis9300Match-

Node

huaweis9300e_firmwareRange≤v200r005c00spc300

huaweis9300e_firmwareMatchv100r006

huaweis9300e_firmwareMatchv200r001

huaweis9300e_firmwareMatchv200r002

huaweis9300e_firmwareMatchv200r003

AND

huaweis9300eMatch-

VendorProductVersionCPE
huaweiac6605_firmwareac6605_v200r001c00cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r001c00:*:*:*:*:*:*:*
huaweiac6605_firmwareac6605_v200r002c00cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r002c00:*:*:*:*:*:*:*
huaweiac6605-cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:*
huaweiacu_firmwareacu_v200r001c00cpe:2.3:o:huawei:acu_firmware:acu_v200r001c00:*:*:*:*:*:*:*
huaweiacu_firmwareacu_v200r002c00cpe:2.3:o:huawei:acu_firmware:acu_v200r002c00:*:*:*:*:*:*:*
huaweiacu-cpe:2.3:h:huawei:acu:-:*:*:*:*:*:*:*
huaweis_series_firmwarev100r006c05cpe:2.3:o:huawei:s_series_firmware:v100r006c05:*:*:*:*:*:*:*
huaweis2300-cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*
huaweis2700-cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*
huaweis3300-cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	ac6605_firmware	ac6605_v200r001c00	cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r001c00:::::::*
huawei	ac6605_firmware	ac6605_v200r002c00	cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r002c00:::::::*
huawei	ac6605	-	cpe:2.3:h:huawei:ac6605:-:::::::*
huawei	acu_firmware	acu_v200r001c00	cpe:2.3:o:huawei:acu_firmware:acu_v200r001c00:::::::*
huawei	acu_firmware	acu_v200r002c00	cpe:2.3:o:huawei:acu_firmware:acu_v200r002c00:::::::*
huawei	acu	-	cpe:2.3:h:huawei:acu:-:::::::*
huawei	s_series_firmware	v100r006c05	cpe:2.3:o:huawei:s_series_firmware:v100r006c05:::::::*
huawei	s2300	-	cpe:2.3:h:huawei:s2300:-:::::::*
huawei	s2700	-	cpe:2.3:h:huawei:s2700:-:::::::*
huawei	s3300	-	cpe:2.3:h:huawei:s3300:-:::::::*

Rows per page:

1-10 of 591

CNA Affected

[
  {
    "product": "AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/hw-373182

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Related for CVE-2014-8572