CVE-2014-9697

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 50.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei Usg9520 FirmwareHuawei Usg9560 FirmwareHuawei Usg9580 Firmware
Timeline
PublishedOct 17
Latest updateMay 17

Description

Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted website.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDhuawei/usg9520_firmwarev300r001c00, v300r001c01spc100+1
▶NVDhuawei/usg9560_firmwarev300r001c00, v300r001c01spc100+1
▶NVDhuawei/usg9580_firmwarev300r001c00, v300r001c01spc100+1

🔴Vulnerability Details

2
GHSA
GHSA-6v5w-79qq-mjhg: Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and M↗2022-05-17
▶
CVEList
CVE-2014-9697: Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and M↗2017-10-17
▶