CVE-2014-9695

Name of the Vulnerable Software and Affected Versions Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier

Description The issue allows a non-super-domain user who accesses the Hyper Module Management (HMM) software through SNMPv3 to perform operations on a server as a super-domain user.

Recommendations For versions V100R001C00SPC160 and earlier, consider restricting access to the HMM software through SNMPv3 until a fix is available. As a temporary workaround, limit the privileges of non-super-domain users to prevent them from performing operations that should be restricted to super-domain users.