Sign-up

ID

VAR-201405-0653


TITLE

Huawei Campus Series Switches has multiple vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2014-03045

DESCRIPTION

Huawei Campus Series Switches is a switch device from Huawei. There are several vulnerabilities in Huawei Campus Series Switches: 1. There is an unspecified error that allows an attacker to exploit an exploit to perform an unauthorized firmware upgrade. 2. The BootRom Menu has an error that allows an attacker to exploit the vulnerability to bypass the system security check mechanism. 3. The BootRom Menu has an error that allows an attacker to exploit the vulnerability to control the device. The following devices are affected by this vulnerability: Huawei Campus S7700 firmware V200R001C00SPC300, V200R002C00SPC100 and V200R003C00SPC300Huawei Campus S9300 firmware V200R001C00SPC300, V200R002C00SPC100 and V200R003C00SPC300Huawei Campus S9700 firmware V200R001C00SPC300, V200R002C00SPC100 and V200R003C00SPC300

Trust: 0.6

sources: CNVD: CNVD-2014-03045

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2014-03045

AFFECTED PRODUCTS

vendor:huaweimodel:campus series switchesscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2014-03045

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2014-03045
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2014-03045
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2014-03045

PATCH

title:Huawei Campus Series Switches has multiple vulnerabilitiesurl:https://www.cnvd.org.cn/patchinfo/show/45618

Trust: 0.6

sources: CNVD: CNVD-2014-03045

EXTERNAL IDS

db:CNVDid:CNVD-2014-03045

Trust: 0.6

sources: CNVD: CNVD-2014-03045

REFERENCES

url:http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-334629.htm

Trust: 0.6

sources: CNVD: CNVD-2014-03045

SOURCES

db:CNVDid:CNVD-2014-03045

LAST UPDATE DATE

2022-05-04T10:23:06.890000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2014-03045date:2014-05-16T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2014-03045date:2014-05-16T00:00:00