CVE-2014-4705 Information

Description

Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300 S7700 S9700 S5300 S5700 S6300 and S6700 series switches; AR150 AR160 AR200 AR1200 AR2200 AR3200 AR530 NetEngine16EX SRG1300 SRG2300 and SRG3300 series routers; and WLAN AC6005 AC6605 and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

http://secunia.com/advisories/59349 http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345171.htm

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5