7.8

CVE-2014-4190

Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with software V200R001 before V200R001SPH013; S5700, S6700, S5300, and S6300 with software V200R002 before V200R002SPH005; S7700, S9300, S9300E, S5300, S5700, S6300, S6700, S2350, S2750, and LSW S9700 with software V200R003 before V200R003SPH005; and S7700, S9300, S9300E, and LSW S9700 with software V200R005 before V200R005C00SPC300 allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.

Data is provided by the National Vulnerability Database (NVD)
HuaweiCampus Lsw S9700 Version-
HuaweiCampus S3300hi Version-
HuaweiCampus S3700hi Version-
HuaweiCampus S5300 Version-
HuaweiCampus S5700 Version-
HuaweiCampus S6300 Version-
HuaweiCampus S6700 Version-
HuaweiCampus S7700 Version-
HuaweiCampus S9300 Version-
HuaweiCampus Lsw S9700 Version-
HuaweiCampus S7700 Version-
HuaweiCampus S9300 Version-
HuaweiCampus S9300e Version-
HuaweiCampus Lsw S9700 Version-
HuaweiCampus S2350 Version-
HuaweiCampus S2750 Version-
HuaweiCampus S5300 Version-
HuaweiCampus S5700 Version-
HuaweiCampus S6300 Version-
HuaweiCampus S6700 Version-
HuaweiCampus S7700 Version-
HuaweiCampus S9300 Version-
HuaweiCampus S9300e Version-
HuaweiCampus S5300 Version-
HuaweiCampus S5700 Version-
HuaweiCampus S6300 Version-
HuaweiCampus S6700 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.454
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.