High severity · published Apr 2, 2017
CVE-2014-8572
Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software…
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ac6605 Firmware · Huawei
ac6605_v200r001c00; ac6605_v200r002c00 · source: NVD
AF
Acu Firmware · Huawei
acu_v200r001c00; acu_v200r002c00 · source: NVD
SS
S Series Firmware · Huawei
v100r006c05 · source: NVD
SF
S5300 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S5700 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S6300 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S6700 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S7700 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S9300 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S9300e Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
SF
S9700 Firmware · Huawei
through v200r005c00spc300; v100r006; v200r001; v200r002; v200r003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8572
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-373182
More from Ac6605 Firmware
7.5
CVE-2017-8147
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
7.5
CVE-2017-2700
AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability
6.5
CVE-2016-6824
Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart)…