CVE-2014-4190

Published: Jun 17, 2014Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with software V200R001 before V200R001SPH013; S5700, S6700, S5300, and S6300 with software V200R002 before V200R002SPH005; S7700, S9300, S9300E, S5300, S5700, S6300, S6700, S2350, S2750, and LSW S9700 with software V200R003 before V200R003SPH005; and S7700, S9300, S9300E, and LSW S9700 with software V200R005 before V200R005C00SPC300 allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.

Affected (16)

Products: Huawei: Campus Series Switch Software, Campus S3300hi, Campus S3700hi, Campus Lsw S9700, Campus S2350, Campus S2750, Campus S7700, Campus S9300, Campus S9300e, Campus S5300, Campus S5700, Campus S6300, Campus S6700

Huawei

13 products

Campus Series Switch Software

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Huawei Campus Series Switch Software	Version v200r001
Huawei Campus S3300hi	All versions
Huawei Campus S3700hi	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Campus Series Switch Software	Version v200r005

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Huawei Campus Series Switch Software	Version v200r003
Huawei Campus Lsw S9700	All versions
Huawei Campus S2350	All versions
Huawei Campus S2750	All versions
Huawei Campus S7700	All versions
Huawei Campus S9300	All versions
Huawei Campus S9300e	All versions

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Huawei Campus Series Switch Software	Version v200r002
Huawei Campus S5300	All versions
Huawei Campus S5700	All versions
Huawei Campus S6300	All versions
Huawei Campus S6700	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-343218.htm

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/67907

Source: cve@mitre.org

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-343218.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/67907

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.