CVE-2014-4190
Description
Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with software V200R001 before V200R001SPH013; S5700, S6700, S5300, and S6300 with software V200R002 before V200R002SPH005; S7700, S9300, S9300E, S5300, S5700, S6300, S6700, S2350, S2750, and LSW S9700 with software V200R003 before V200R003SPH005; and S7700, S9300, S9300E, and LSW S9700 with software V200R005 before V200R005C00SPC300 allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei campus_series_switch_software | v200r001, v200r005, v200r003, v200r002 | — |
| huawei campus_lsw_s9700 | No range specified | — |
| huawei campus_s3300hi | No range specified | — |
| huawei campus_s3700hi | No range specified | — |
| huawei campus_s5300 | No range specified | — |
| huawei campus_s5700 | No range specified | — |
| huawei campus_s6300 | No range specified | — |
| huawei campus_s6700 | No range specified | — |
| huawei campus_s7700 | No range specified | — |
| huawei campus_s9300 | No range specified | — |
| huawei campus_s9300e | No range specified | — |
| huawei campus_s2350 | No range specified | — |
| huawei campus_s2750 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.