Login Request a demo
High severity · published Apr 2, 2017
CVE-2014-3223
Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in…
7.5
CVSS
1%
EPSS
No
On KEV
Description
Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
S2300 Firmware · Huawei
v100r006c00spc800; v100r006c01spc100; v100r006c03 · source: NVD
SF
S3300 Firmware · Huawei
v100r006c00spc800; v100r006c01spc100; v100r006c03 · source: NVD
SF
S5300 Firmware · Huawei
v100r006c00spc800; v100r006c01spc100; v100r006c03 · source: NVD
SF
S6300 Firmware · Huawei
v100r006c00spc800; v100r006c01spc100; v100r006c03 · source: NVD
SF
S9300 Firmware · Huawei
v100r006c00spc500; v100r006c00spc800 · source: NVD
Affected product
SF
S2300 Firmware
Huawei
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3223
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3223
Mitigation
http://www.huawei.com/en/psirt/security-advisories/hw-329625
More from S2300 Firmware
7.5
CVE-2019-5285
Some Huawei S series switches have a DoS vulnerability
7.5
CVE-2017-17165
IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00,…
7.5
CVE-2017-8147
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
7.5
CVE-2015-3913
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message
7.5
CVE-2015-8676
Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before…