CVE-2014-4705

HIGH

Huawei eSap Platform - Remote Denial of Service via Crafted Packet Length Field

Title source: llm

Description

Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.

References (2)

Core 2

Core References

Permissions Required third-party-advisory x_refsource_secunia

http://secunia.com/advisories/59349

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345171.htm

Scores

CVSS v3 7.5

EPSS 0.0031

EPSS Percentile 54.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-119

Status published

Products (50)

huawei/ar1200_firmware v200r003c00spc100

huawei/ar1200_firmware v200r003c00spc200

huawei/ar1200_firmware v200r003c01spc100

huawei/ar1200_firmware v200r003c01spc300

huawei/ar1200_firmware v200r003c01spc900

huawei/ar1200_firmware v200r005c00spc100

huawei/ar1200_firmware v200r005c00spc200

huawei/ar150_firmware v200r003c00spc100

huawei/ar150_firmware v200r003c00spc200

huawei/ar150_firmware v200r003c01spc100

... and 40 more

Published Jan 30, 2018

Tracked Since Feb 18, 2026