High severity · published Apr 2, 2017
CVE-2014-3224
Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway…
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300 enable attackers to launch DoS attacks by crafting and sending malformed packets to these vulnerable products.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
Quidway S5300 Firmware · Huawei
v200r003c00spc300 · source: NVD
QS
Quidway S5700 Firmware · Huawei
v200r003c00spc300 · source: NVD
QS
Quidway S6300 Firmware · Huawei
v200r003c00spc300 · source: NVD
QS
Quidway S6700 Firmware · Huawei
v200r003c00spc300 · source: NVD
QS
Quidway S7700 Firmware · Huawei
v200r003c00spc500 · source: NVD
QS
Quidway S9300 Firmware · Huawei
v200r003c00spc500 · source: NVD
QS
Quidway S9700 Firmware · Huawei
v200r003c00spc500 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3224
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3224
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-333184
More from Quidway S5300 Firmware
7.5
CVE-2017-17165
IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00,…
4.9
CVE-2015-8086
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300,…
4.9
CVE-2015-8085
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300,…