What’s Vulnerable › Vulnerabilities

CVE-2014-8572

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-02 · updated 2026-06-17
• Weakness: CWE-20

Description

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

Affected products

• Huawei Ac6605 Firmware: ac6605_v200r001c00, ac6605_v200r002c00
• Huawei Acu Firmware: acu_v200r001c00, acu_v200r002c00
• Huawei S5300 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S5700 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S6300 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S6700 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S7700 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S9300 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S9300E Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S9700 Firmware: through v200r005c00spc300; v100r006, v200r001, v200r002, v200r003
• Huawei S Series Firmware: v100r006c05

References

• http://www.huawei.com/en/psirt/security-advisories/hw-373182
• http://www.huawei.com/en/psirt/security-advisories/hw-373182

Get alerted when CVE-2014-8572 or the next vulnerability affects your stack