Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4671 State: PUBLISHED Published: 2014-07-09T01:00:00 Last Updated: 2024-08-06T11:27:36.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. Additional Analyst Notes: - CVE Program Container: References: - http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ - http://rhn.redhat.com/errata/RHSA-2014-0860.html - http://www.securityfocus.com/bid/68457 - http://secunia.com/advisories/59774 - http://www.securitytracker.com/id/1030533 - http://secunia.com/advisories/59837 - http://security.gentoo.org/glsa/glsa-201407-02.xml - http://helpx.adobe.com/security/products/flash-player/apsb14-17.html
CVE ID: CVE-2014-4672 State: PUBLISHED Published: 2014-07-03T17:00:00 Last Updated: 2024-08-06T11:27:36.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property. Additional Analyst Notes: - CVE Program Container: References: - http://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix/
CVE ID: CVE-2014-4677 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T11:27:35.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlPath argument. Additional Analyst Notes: - CVE Program Container: References: - https://bierbaumer.net/security/cve-2014-4677/ - https://gpgtools.org/releases/gpgsuite/2015.08/release-notes.html
CVE ID: CVE-2014-4678 State: PUBLISHED Published: 2020-02-20T02:49:50 Last Updated: 2024-08-06T11:27:35.287Z Vendors: n/a Products: Ansible Problem Types: Other Description: The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/commit/5429b85b9f6c2e640074176f36ff05fd5e4d1916 - https://groups.google.com/forum/message/raw?msg=ansible-announce/ieV1vZvcTXU/5Q93ThkY9rIJ - https://security-tracker.debian
ps://groups.google.com/forum/message/raw?msg=ansible-announce/ieV1vZvcTXU/5Q93ThkY9rIJ - https://security-tracker.debian.org/tracker/CVE-2014-4678 - https://www.openwall.com/lists/oss-security/2014/06/26/30 - https://www.openwall.com/lists/oss-security/2014/07/02/2 - https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2014-4678 - https://www.rapid7.com/db/vulnerabilities/freebsd-vid-2c493ac8-205e-11e5-a4a5-002590263bf5
CVE ID: CVE-2014-4682 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:35.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf
CVE ID: CVE-2014-4683 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:35.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf
CVE ID: CVE-2014-4684 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:35.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf
CVE ID: CVE-2014-4685 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:35.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf
CVE ID: CVE-2014-4686 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:35.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf
CVE ID: CVE-2014-4687 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the starttime0 parameter to firewall_schedule.php, (2) the rssfeed parameter to rss.widget.php, (3) the servicestatusfilter parameter to services_status.widget.php, (4) the txtRecallBuffer parameter to exec.php, or (5) the HTTP Referer header to log.widget.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_09.we
tional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_09.webgui.asc
CVE ID: CVE-2014-4688 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:35.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag_dns.php in a Create Alias action, (2) the smartmonemail value to diag_smart.php, or (3) the database value to status_rrd_graph_img.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_10.webgui.asc - https://www.exploit-db.com/exploits/43560/
CVE ID: CVE-2014-4689 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:35.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_11.webgui.asc
CVE ID: CVE-2014-4690 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info files via a crafted path in the pkg parameter to pkg_mgr_install.php and allow (2) remote authenticated users to read arbitrary files via the downloadbackup parameter to system_firmware_restorefullbackup.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_11.webgui.asc
CVE ID: CVE-2014-4691 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:35.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web sessions via a firewall login cookie. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_12.webgui.asc
CVE ID: CVE-2014-4692 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:35.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense before 2.1.4, when HTTP is used, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_12.webgui.asc
CVE ID: CVE-2014-4693 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified variables to snort_select_alias.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc
CVE ID: CVE-2014-4694 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via unspecified variables. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc
CVE ID: CVE-2014-4695 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to snort_rules_flowbits.php or (2) the returl parameter to snort_select_alias.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc
CVE ID: CVE-2014-4696 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T11:27:36.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to suricata_rules_flowbits.php or (2) the returl parameter to suricata_select_alias.php. Additional Analyst Notes: - CVE Program Container: References: - https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc
CVE ID: CVE-2014-4698 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T11:27:36.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - http://secunia.com/advisories/54553 - http://rhn.redhat.com/errata/RHSA-2014-176
m/support/docview.wss?uid=swg21683486 - http://secunia.com/advisories/54553 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - https://bugs.php.net/bug.php?id=67539 - http://rhn.redhat.com/errata/RHSA-2014-1326.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-4699 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T11:27:35.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-3047.html - http://www.ubuntu.com/usn/USN-2269-1 - ht
Container: References: - http://linux.oracle.com/errata/ELSA-2014-3047.html - http://www.ubuntu.com/usn/USN-2269-1 - http://www.ubuntu.com/usn/USN-2274-1 - http://www.ubuntu.com/usn/USN-2268-1 - http://www.ubuntu.com/usn/USN-2267-1 - http://www.osvdb.org/108754 - http://secunia.com/advisories/60220 - http://www.openwall.com/lists/oss-security/2014/07/04/4 - http://www.ubuntu.com/usn/USN-2271-1 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11 - http://secunia.com/advisories/59654 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.97 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.47 - http://www.ubuntu.com/usn/USN-2266-1 - http://openwall.com/lists/oss
ernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.47 - http://www.ubuntu.com/usn/USN-2266-1 - http://openwall.com/lists/oss-security/2014/07/08/5 - http://openwall.com/lists/oss-security/2014/07/08/16 - http://secunia.com/advisories/59633 - http://packetstormsecurity.com/files/127573/Linux-Kernel-ptrace-sysret-Local-Privilege-Escalation.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.4 - http://linux.oracle.com/errata/ELSA-2014-0924.html - http://openwall.com/lists/oss-security/2014/07/05/4 - http://secunia.com/advisories/60393 - http://secunia.com/advisories/60380 - http://www.ubuntu.com/usn/USN-2270-1 - http://linux.oracle.com/errata/ELSA-2014-3048.html - http://www.exploit-
/60380 - http://www.ubuntu.com/usn/USN-2270-1 - http://linux.oracle.com/errata/ELSA-2014-3048.html - http://www.exploit-db.com/exploits/34134 - http://secunia.com/advisories/59639 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a - http://www.ubuntu.com/usn/USN-2273-1 - http://www.ubuntu.com/usn/USN-2272-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1115927 - http://www.debian.org/security/2014/dsa-2972 - https://github.com/torvalds/linux/commit/b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a
CVE ID: CVE-2014-4700 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T11:27:36.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68530 - http://www.securitytracker.com/id/1030566 - http://secunia.com/advisories/59889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94460 - http://support.citrix.com/article/CTX139591
CVE ID: CVE-2014-4701 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T11:27:36.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4702. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33387 - http://secunia.com/advisories/61319 - http://seclists.org/fulldisclosure/2014/May/74 - http://www.securityfocus.com/bid/67433 - http://secunia.com/advisories/58751 - http://www.openwall.com/lists/oss-security/2014/06/30/
curityfocus.com/bid/67433 - http://secunia.com/advisories/58751 - http://www.openwall.com/lists/oss-security/2014/06/30/6 - http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_medium=News+Post&utm_content=Nagios%20Plugins%202.0.2%20Released&utm_campaign=Nagios%20Plugins - http://legalhackers.com/advisories/nagios-check_dhcp.txt - https://www.suse.com/support/update/announcement/2014/suse-su-20141352-1.html
CVE ID: CVE-2014-4702 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T11:27:36.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4701. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61319 - http://secunia.com/advisories/58751 - http://www.securityfocus.com/bid/68293 - http://www.openwall.com/lists/oss-security/2014/06/30/6 - http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_mediu
sts/oss-security/2014/06/30/6 - http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_medium=News+Post&utm_content=Nagios%20Plugins%202.0.2%20Released&utm_campaign=Nagios%20Plugins - https://www.suse.com/support/update/announcement/2014/suse-su-20141352-1.html
CVE ID: CVE-2014-4703 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T11:27:36.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the configuration file in the extra-opts flag. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4701. Additional Analyst Notes: - CVE Program Container: References: - http://nagios-plugins.org/nagios-plugins-2-0-3-released/ - http://seclists.org/fulldisclosure/2014/Jun/141 - http://www.securityfocus.com/bid/76810 - http://www.openwall.com/lists/oss-security/2014/06/30/6
CVE ID: CVE-2014-4705 State: PUBLISHED Published: 2018-01-30T17:00:00 Last Updated: 2024-08-06T11:27:36.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59349 - h
ld in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59349 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345171.htm
CVE ID: CVE-2014-4706 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T11:27:36.889Z Vendors: n/a Products: Campus S3700HI, S5700, S6700 S3300HI, S5300, S6300, S9300, S7700,LSW S9700,Campus S5700, S6700,Campus S7700, S9300E, S2350, S2750,S9300,S9300E, Campus S3700HI with software V200R001C00SPC300,Campus S5700 with software V200R002C00SPC100,Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500,LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500,S2350 with software V200R003C00SPC300,S2750 with software V200R003C00SPC300,S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S5700 with software V200R001C00SPC300,V20
C300,S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S5700 with software V200R001C00SPC300,V200R003C00SPC300,S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S7700 with software V200R001C00SPC300,S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500,S9300E with software V200R003C00SPC300,V200R003C00SPC500, Problem Types: Heap Overflow Description: Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001
ware V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00S
with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-343218
CVE ID: CVE-2014-4707 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T11:27:36.226Z Vendors: n/a Products: S7700,S9300,S9700 S7700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300,S9300 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300,S9700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, Problem Types: BootRom and Boot Menu Description: Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software,
001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software, bypass a Menu protection mechanism, conduct a Menu compromise attack, or bypass a Menu/upgrade protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-334629