Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4706


Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 28 products from huawei, from huawei, from huawei and 25 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2017, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2017-04-02T20:59:00.280

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei campus_s3700hi_firmware v200r001c00spc300 Yes
Hardware huawei campus_s3700hi - No
Operating System huawei s5700_firmware v200r001c00spc300 Yes
Hardware huawei s5700 - No
Operating System huawei s6700_firmware v200r001c00spc300 Yes
Hardware huawei s6700 - No
Operating System huawei s3300hi_firmware v200r001c00spc300 Yes
Hardware huawei s3300hi - No
Operating System huawei s5300_firmware v200r001c00spc300 Yes
Hardware huawei s5300 - No
Operating System huawei s6300_firmware v200r001c00spc300 Yes
Hardware huawei s6300 - No
Operating System huawei s9300_firmware v200r001c00spc300 Yes
Hardware huawei s9300 - No
Operating System huawei s7700_firmware v200r001c00spc300 Yes
Hardware huawei s7700 - No
Operating System huawei lsw_s9700_firmware v200r001c00spc300 Yes
Hardware huawei lsw_s9700 - No
Operating System huawei campus_s5700_firmware v200r002c00spc100 Yes
Hardware huawei campus_s5700 - No
Operating System huawei s6700_firmware v200r002c00spc100 Yes
Hardware huawei s6700 - No
Operating System huawei s5300_firmware v200r002c00spc100 Yes
Hardware huawei s5300 - No
Operating System huawei s6300_firmware v200r002c00spc100 Yes
Hardware huawei s6300 - No
Operating System huawei campus_s7700_firmware v200r003c00spc300 Yes
Hardware huawei campus_s7700 - No
Operating System huawei s9300_firmware v200r003c00spc300 Yes
Hardware huawei s9300 - No
Operating System huawei s9300e_firmware v200r003c00spc300 Yes
Hardware huawei s9300e - No
Operating System huawei s5300_firmware v200r003c00spc300 Yes
Hardware huawei s5300 - No
Operating System huawei s5700_firmware v200r003c00spc300 Yes
Hardware huawei s5700 - No
Operating System huawei s6300_firmware v200r003c00spc300 Yes
Hardware huawei s6300 - No
Operating System huawei s6700_firmware v200r003c00spc300 Yes
Hardware huawei s6700 - No
Operating System huawei s2350_firmware v200r003c00spc300 Yes
Hardware huawei s2350 - No
Operating System huawei s2750_firmware v200r003c00spc300 Yes
Hardware huawei s2750 - No
Operating System huawei lsw_s9700_firmware v200r003c00spc300 Yes
Hardware huawei lsw_s9700 - No
Operating System huawei campus_s7700_firmware v200r003c00spc500 Yes
Hardware huawei campus_s7700 - No
Operating System huawei s9300_firmware v200r003c00spc500 Yes
Hardware huawei s9300 - No
Operating System huawei s9300e_firmware v200r003c00spc500 Yes
Hardware huawei s9300e - No
Operating System huawei lsw_s9700_firmware v200r003c00spc500 Yes
Hardware huawei lsw_s9700 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For huawei's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.