cbcvebase.
CVE-2014-4706
published 2017-04-02

CVE-2014-4706: Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software…

PriorityP434high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
0.74%
50.4th percentile
Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
huaweicampus_s3700hi_firmware——
huaweicampus_s5700_firmware——
huaweicampus_s7700_firmware——
huaweicampus_s7700_firmware——
huaweilsw_s9700_firmware——
huaweilsw_s9700_firmware——
huaweilsw_s9700_firmware——
huaweis2350_firmware——
huaweis2750_firmware——
huaweis3300hi_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5700_firmware——
huaweis5700_firmware——
huaweis6300_firmware——
huaweis6300_firmware——
huaweis6300_firmware——
huaweis6700_firmware——
huaweis6700_firmware——
huaweis6700_firmware——
huaweis7700_firmware——
huaweis9300_firmware——
huaweis9300_firmware——
huaweis9300_firmware——

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.