cbcvebase.
CVE-2014-8570
published 2017-04-02

CVE-2014-8570: Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005…

PriorityP426medium5.3CVSS 3.0
AVNACLPRNUINSUCLINAN
EPSS
0.60%
45.0th percentile
Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S12712 with software V200R005; 5700HI, 5300HI with software V100R006, V200R001, V200R002, V200R003, V200R005; 5710EI, 5310EI with software V200R002, V200R003, V200R005; 5710HI, 5310HI with software V200R003, V200R005; 6700EI, 6300EI with software V200R005 could cause a leak of IP addresses of devices, related to unintended interface support for VRP MPLS LSP Ping.

Affected

112 ranges· showing 25
VendorProductVersion rangeFixed in
huawei5300hi_firmware——
huawei5300hi_firmware——
huawei5300hi_firmware——
huawei5300hi_firmware——
huawei5300hi_firmware——
huawei5310ei_firmware——
huawei5310ei_firmware——
huawei5310ei_firmware——
huawei5310hi_firmware——
huawei5310hi_firmware——
huawei5700hi_firmware——
huawei5700hi_firmware——
huawei5700hi_firmware——
huawei5700hi_firmware——
huawei5700hi_firmware——
huawei5710ei_firmware——
huawei5710ei_firmware——
huawei5710ei_firmware——
huawei5710hi_firmware——
huawei5710hi_firmware——
huawei6300ei_firmware——
huawei6700ei_firmware——
huaweis12708_firmware——
huaweis12712_firmware——
huaweis7700_firmware——

CVSS provenance

nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.