PT-2014-8625

CVE-2014-8572

·

تاريخ النشر

2014-10-10

·

تاريخ التحديث

2017-04-11

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Huawei AC6605 versions V200R001C00 through V200R002C00 Huawei ACU versions V200R001C00 through V200R002C00 Huawei S2300, S3300, S2700, S3700 versions prior to V100R006C05 Huawei S5300, S5700, S6300, S6700 versions prior to V200R005C00SPC300 Huawei S7700, S9300, S9300E, S9700 versions prior to V200R005C00SPC300
Description The issue is related to an input verification problem in the SSH of the VRP device, allowing remote attackers to send a special SSH packet and cause a denial of service.
Recommendations For Huawei AC6605 versions V200R001C00 through V200R002C00, update to a version later than V200R002C00 to resolve the issue. For Huawei ACU versions V200R001C00 through V200R002C00, update to a version later than V200R002C00 to resolve the issue. For Huawei S2300, S3300, S2700, S3700 versions prior to V100R006C05, update to V100R006C05 or a later version to resolve the issue. For Huawei S5300, S5700, S6300, S6700 versions prior to V200R005C00SPC300, update to V200R005C00SPC300 or a later version to resolve the issue. For Huawei S7700, S9300, S9300E, S9700 versions prior to V200R005C00SPC300, update to V200R005C00SPC300 or a later version to resolve the issue.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾