CVE-2014-4705
Açıklama
Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300 ve S6700 serisi switch'lerde; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300 ve SRG3300 serisi router'larda; ve WLAN AC6005, AC6605 ve ACU2 erişim kontrolcülerindeki eSap yazılım platformunda bulunan birden fazla yığın tabanlı arabellek taşması, uzaktaki saldırganların bir paketteki özel olarak hazırlanmış uzunluk alanı aracılığıyla hizmet reddine (cihaz yeniden başlatılmasına) neden olmasına olanak tanır.
Nasıl düzeltilir
Kaynaklarda bu zafiyet için düzeltilmiş sürüm ya da yama bağlantısı yok.
Etkilenen ürünler
| Ürün | Etkilenen sürümler | Düzeltildiği sürüm |
|---|---|---|
| huawei s9300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 | — |
| huawei s9700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 | — |
| huawei s7700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc500 | — |
| huawei s5300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s5700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s6300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s6700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei ar150_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar160_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar1200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar2200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar3200_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei ar530_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei netengine16ex_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei srg1300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei srg2300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei srg3300_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200 | — |
| huawei wlan_ac6005_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c00spc300, v200r003c00spc500, v200r005c00spc100 | — |
| huawei wlan_ac6605_firmware | v200r003c00spc100, v200r003c00spc200, v200r003c00spc300, v200r003c00spc500, v200r005c00spc100 | — |
| huawei wlan_acu2_firmware | v200r005c00spc100 | — |
Sürümünüzü kontrol edin
Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.
Attack Surface Management
Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.