CVE-2014-4705: Buffer Overflow
Published Jan 30, 2018
·Updated
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
Affected Software
130 affected components
Huawei S9300 Firmware=v200r001c00spc300
Huawei S9300 Firmware=v200r002c00spc100
Huawei S9300 Firmware=v200r003c00spc500
Huawei S9300
Huawei S9700 Firmware=v200r001c00spc300
Huawei S9700 Firmware=v200r002c00spc100
Huawei S9700 Firmware=v200r003c00spc500
Huawei S9700
Huawei S7700 Firmware=v200r001c00spc300
Huawei S7700 Firmware=v200r002c00spc100
Huawei S7700 Firmware=v200r003c00spc500
Huawei S7700
Huawei S5300 Firmware=v200r001c00spc300
Huawei S5300 Firmware=v200r002c00spc100
Huawei S5300 Firmware=v200r003c00spc300
Huawei S5300
Huawei S5700 Firmware=v200r001c00spc300
Huawei S5700 Firmware=v200r002c00spc100
Huawei S5700 Firmware=v200r003c00spc300
Huawei S5700
Huawei S6300 Firmware=v200r001c00spc300
Huawei S6300 Firmware=v200r002c00spc100
Huawei S6300 Firmware=v200r003c00spc300
Huawei S6300
Huawei S6700 Firmware=v200r001c00spc300
Huawei S6700 Firmware=v200r002c00spc100
Huawei S6700 Firmware=v200r003c00spc300
Huawei S6700
Huawei Ar150 Firmware=v200r003c00spc100
Huawei Ar150 Firmware=v200r003c00spc200
Huawei Ar150 Firmware=v200r003c01spc100
Huawei Ar150 Firmware=v200r003c01spc300
Huawei Ar150 Firmware=v200r003c01spc900
Huawei Ar150 Firmware=v200r005c00spc100
Huawei Ar150 Firmware=v200r005c00spc200
Huawei AR150
Huawei Ar160 Firmware=v200r003c00spc100
Huawei Ar160 Firmware=v200r003c00spc200
Huawei Ar160 Firmware=v200r003c01spc100
Huawei Ar160 Firmware=v200r003c01spc300
Huawei Ar160 Firmware=v200r003c01spc900
Huawei Ar160 Firmware=v200r005c00spc100
Huawei Ar160 Firmware=v200r005c00spc200
Huawei AR160
Huawei Ar200 Firmware=v200r003c00spc100
Huawei Ar200 Firmware=v200r003c00spc200
Huawei Ar200 Firmware=v200r003c01spc100
Huawei Ar200 Firmware=v200r003c01spc300
Huawei Ar200 Firmware=v200r003c01spc900
Huawei Ar200 Firmware=v200r005c00spc100
Huawei Ar200 Firmware=v200r005c00spc200
Huawei AR200
Huawei Ar1200 Firmware=v200r003c00spc100
Huawei Ar1200 Firmware=v200r003c00spc200
Huawei Ar1200 Firmware=v200r003c01spc100
Huawei Ar1200 Firmware=v200r003c01spc300
Huawei Ar1200 Firmware=v200r003c01spc900
Huawei Ar1200 Firmware=v200r005c00spc100
Huawei Ar1200 Firmware=v200r005c00spc200
Huawei AR1200
Huawei Ar2200 Firmware=v200r003c00spc100
Huawei Ar2200 Firmware=v200r003c00spc200
Huawei Ar2200 Firmware=v200r003c01spc100
Huawei Ar2200 Firmware=v200r003c01spc300
Huawei Ar2200 Firmware=v200r003c01spc900
Huawei Ar2200 Firmware=v200r005c00spc100
Huawei Ar2200 Firmware=v200r005c00spc200
Huawei AR2200
Huawei Ar3200 Firmware=v200r003c00spc100
Huawei Ar3200 Firmware=v200r003c00spc200
Huawei Ar3200 Firmware=v200r003c01spc100
Huawei Ar3200 Firmware=v200r003c01spc300
Huawei Ar3200 Firmware=v200r003c01spc900
Huawei Ar3200 Firmware=v200r005c00spc100
Huawei Ar3200 Firmware=v200r005c00spc200
Huawei AR3200
Huawei Ar530 Firmware=v200r003c00spc100
Huawei Ar530 Firmware=v200r003c00spc200
Huawei Ar530 Firmware=v200r003c01spc100
Huawei Ar530 Firmware=v200r003c01spc300
Huawei Ar530 Firmware=v200r003c01spc900
Huawei Ar530 Firmware=v200r005c00spc100
Huawei Ar530 Firmware=v200r005c00spc200
Huawei AR530
Huawei Netengine16ex Firmware=v200r003c00spc100
Huawei Netengine16ex Firmware=v200r003c00spc200
Huawei Netengine16ex Firmware=v200r003c01spc100
Huawei Netengine16ex Firmware=v200r003c01spc300
Huawei Netengine16ex Firmware=v200r003c01spc900
Huawei Netengine16ex Firmware=v200r005c00spc100
Huawei Netengine16ex Firmware=v200r005c00spc200
Huawei NetEngine16EX
Huawei Srg1300 Firmware=v200r003c00spc100
Huawei Srg1300 Firmware=v200r003c00spc200
Huawei Srg1300 Firmware=v200r003c01spc100
Huawei Srg1300 Firmware=v200r003c01spc300
Huawei Srg1300 Firmware=v200r003c01spc900
Huawei Srg1300 Firmware=v200r005c00spc100
Huawei Srg1300 Firmware=v200r005c00spc200
Huawei SRG1300
Huawei Srg2300 Firmware=v200r003c00spc100
Huawei Srg2300 Firmware=v200r003c00spc200
Huawei Srg2300 Firmware=v200r003c01spc100
Huawei Srg2300 Firmware=v200r003c01spc300
Huawei Srg2300 Firmware=v200r003c01spc900
Huawei Srg2300 Firmware=v200r005c00spc100
Huawei Srg2300 Firmware=v200r005c00spc200
Huawei SRG2300
Huawei Srg3300 Firmware=v200r003c00spc100
Huawei Srg3300 Firmware=v200r003c00spc200
Huawei Srg3300 Firmware=v200r003c01spc100
Huawei Srg3300 Firmware=v200r003c01spc300
Huawei Srg3300 Firmware=v200r003c01spc900
Huawei Srg3300 Firmware=v200r005c00spc100
Huawei Srg3300 Firmware=v200r005c00spc200
Huawei SRG3300
Huawei Wlan Ac6005 Firmware=v200r003c00spc100
Huawei Wlan Ac6005 Firmware=v200r003c00spc200
Huawei Wlan Ac6005 Firmware=v200r003c00spc300
Huawei Wlan Ac6005 Firmware=v200r003c00spc500
Huawei Wlan Ac6005 Firmware=v200r005c00spc100
Huawei WLAN AC6005
Huawei Wlan Ac6605 Firmware=v200r003c00spc100
Huawei Wlan Ac6605 Firmware=v200r003c00spc200
Huawei Wlan Ac6605 Firmware=v200r003c00spc300
Huawei Wlan Ac6605 Firmware=v200r003c00spc500
Huawei Wlan Ac6605 Firmware=v200r005c00spc100
Huawei Wlan Ac6605
Huawei Wlan Acu2 Firmware=v200r005c00spc100
Huawei Wlan Acu2
Event History
Jan 30, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4705?
CVE-2014-4705 has a high severity level due to multiple heap-based buffer overflows which can lead to remote code execution.
2
How do I fix CVE-2014-4705?
To fix CVE-2014-4705, update the firmware to the latest version provided by Huawei that addresses the vulnerability.
3
What devices are affected by CVE-2014-4705?
CVE-2014-4705 affects various Huawei switches and routers including the S9300, S7700, S9700, AR series, and WLAN devices.
4
What type of vulnerability is CVE-2014-4705?
CVE-2014-4705 is classified as a heap-based buffer overflow vulnerability.
5
Is CVE-2014-4705 being actively exploited?
There are indications that CVE-2014-4705 may be actively exploited in the wild, making it critical to apply patches promptly.