CVE-2014-4705 - CVE House
Back to Database
Status published High CVE-2014-4705

Multiple heap-based buffer overflows in the eSap software platform in...

Vulnerability Description

Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4705

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2021-40033
There is an information exposure vulnerability on several Huawei Products....
Medium 5.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8

Affected Vendor

Affected Software

s9300 firmware, s9700 firmware, s7700 firmware, s5300 firmware, s5700 firmware, s6300 firmware, s6700 firmware, ar150 firmware, ar160 firmware, ar200 firmware, ar1200 firmware, ar2200 firmware, ar3200 firmware, ar530 firmware, netengine16ex firmware, srg1300 firmware, srg2300 firmware, srg3300 firmware, wlan ac6005 firmware, wlan ac6605 firmware, wlan acu2 firmware
Vulnerable Versions:
v200r001c00spc300, v200r002c00spc100, v200r003c00spc500, v200r003c00spc300, v200r003c00spc100, v200r003c00spc200, v200r003c01spc100, v200r003c01spc300, v200r003c01spc900, v200r005c00spc100, v200r005c00spc200

Timeline

Official Publish: January 30th, 2018
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.