CVE-2014-4706
Description
Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei campus_s3700hi_firmware | v200r001c00spc300 | — |
| huawei s5700_firmware | v200r001c00spc300, v200r003c00spc300 | — |
| huawei s6700_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s3300hi_firmware | v200r001c00spc300 | — |
| huawei s5300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s6300_firmware | v200r001c00spc300, v200r002c00spc100, v200r003c00spc300 | — |
| huawei s9300_firmware | v200r001c00spc300, v200r003c00spc300, v200r003c00spc500 | — |
| huawei s7700_firmware | v200r001c00spc300 | — |
| huawei lsw_s9700_firmware | v200r001c00spc300, v200r003c00spc300, v200r003c00spc500 | — |
| huawei campus_s5700_firmware | v200r002c00spc100 | — |
| huawei campus_s7700_firmware | v200r003c00spc300, v200r003c00spc500 | — |
| huawei s9300e_firmware | v200r003c00spc300, v200r003c00spc500 | — |
| huawei s2350_firmware | v200r003c00spc300 | — |
| huawei s2750_firmware | v200r003c00spc300 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.