CVE-2014-3224: Input Validation
First published: Sun Apr 02 2017(Updated: )
Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300 enable attackers to launch DoS attacks by crafting and sending malformed packets to these vulnerable products.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Quidway S5300 firmware | =v200r003c00spc300 | |
| Huawei S5700S-LI Firmware | =v200r003c00spc300 | |
| Huawei Quidway S6300 | =v200r003c00spc300 | |
| Huawei Quidway S6700 firmware | =v200r003c00spc300 | |
| Huawei Quidway S5300 firmware | ||
| Huawei Quidway S5700 Firmware | ||
| Huawei Campus S6300 | ||
| Huawei Quidway S6700 | ||
| Huawei Quidway S7700 | =v200r003c00spc500 | |
| Huawei Quidway S9300 | =v200r003c00spc500 | |
| Huawei 9700 Firmware | =v200r003c00spc500 | |
| Huawei Quidway Service Process Unit Board S7700 | ||
| Huawei Quidway Service Process Unit Board S9300 | ||
| Huawei Quidway Service Process Unit Board S9700 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3224?
CVE-2014-3224 is classified as a high severity vulnerability that allows attackers to execute denial-of-service attacks.
Which Huawei devices are affected by CVE-2014-3224?
CVE-2014-3224 affects the Huawei Quidway S9700, S9300, S7700, S6700, S6300, S5700, and S5300 with specific firmware versions.
How do I fix CVE-2014-3224?
To fix CVE-2014-3224, update the affected Huawei Quidway devices to the latest firmware versions provided by Huawei.
Can CVE-2014-3224 be exploited remotely?
Yes, CVE-2014-3224 can be exploited remotely by attackers to disrupt services on the affected devices.
What impact does CVE-2014-3224 have on my network?
CVE-2014-3224 can lead to denial-of-service conditions, potentially causing significant downtime for network services.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei quidway s5300 firmware
- version/huawei quidway s5300 firmware/v200r003c00spc300
- canonical/huawei s5700s-li firmware
- version/huawei s5700s-li firmware/v200r003c00spc300
- canonical/huawei quidway s6300
- version/huawei quidway s6300/v200r003c00spc300
- canonical/huawei quidway s6700 firmware
- version/huawei quidway s6700 firmware/v200r003c00spc300
- canonical/huawei quidway s5700 firmware
- canonical/huawei campus s6300
- canonical/huawei quidway s6700
- canonical/huawei quidway s7700
- version/huawei quidway s7700/v200r003c00spc500
- canonical/huawei quidway s9300
- version/huawei quidway s9300/v200r003c00spc500
- canonical/huawei 9700 firmware
- version/huawei 9700 firmware/v200r003c00spc500
- canonical/huawei quidway service process unit board s7700
- canonical/huawei quidway service process unit board s9300
- canonical/huawei quidway service process unit board s9700