What’s Vulnerable › Vulnerabilities

CVE-2014-4707

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-02 · updated 2026-06-17
• Weakness: CWE-284

Description

Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software, bypass a Menu protection mechanism, conduct a Menu compromise attack, or bypass a Menu/upgrade protection mechanism.

Affected products

• Huawei Campus S7700 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc300
• Huawei Campus S9300 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc300
• Huawei Campus S9700 Firmware: v200r001c00spc300, v200r002c00spc100, v200r003c00spc300

References

• http://www.huawei.com/en/psirt/security-advisories/hw-334629
• http://www.huawei.com/en/psirt/security-advisories/hw-334629

Get alerted when CVE-2014-4707 or the next vulnerability affects your stack