PT-2014-8625

CVE-2014-8572

·

Published

2014-10-10

·

Updated

2017-04-11

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Huawei AC6605 versions V200R001C00 through V200R002C00 Huawei ACU versions V200R001C00 through V200R002C00 Huawei S2300, S3300, S2700, S3700 versions prior to V100R006C05 Huawei S5300, S5700, S6300, S6700 versions prior to V200R005C00SPC300 Huawei S7700, S9300, S9300E, S9700 versions prior to V200R005C00SPC300
Description The issue is related to an input verification problem in the SSH of the VRP device, allowing remote attackers to send a special SSH packet and cause a denial of service.
Recommendations For Huawei AC6605 versions V200R001C00 through V200R002C00, update to a version later than V200R002C00 to resolve the issue. For Huawei ACU versions V200R001C00 through V200R002C00, update to a version later than V200R002C00 to resolve the issue. For Huawei S2300, S3300, S2700, S3700 versions prior to V100R006C05, update to V100R006C05 or a later version to resolve the issue. For Huawei S5300, S5700, S6300, S6700 versions prior to V200R005C00SPC300, update to V200R005C00SPC300 or a later version to resolve the issue. For Huawei S7700, S9300, S9300E, S9700 versions prior to V200R005C00SPC300, update to V200R005C00SPC300 or a later version to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾