Vulnerability Details : CVE-2014-9697
Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted website.
Vulnerability category: Denial of service
Products affected by CVE-2014-9697
- cpe:2.3:o:huawei:usg9520_firmware:v300r001c01spc100:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:usg9520_firmware:v300r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:usg9580_firmware:v300r001c01spc100:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:usg9580_firmware:v300r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:usg9560_firmware:v300r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:usg9560_firmware:v300r001c01spc100:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-9697
0.24%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 62 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-9697
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2014-9697
-
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-9697
-
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408141.htm
Security Advisory-Memory Leak Vulnerability on USG productsVendor Advisory
Jump to