{"id":"CVE-2014-4705","aliases":["EUVD-2014-4624","GHSA-7vcf-r2g3-43c4"],"status":"published","title":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700,...","description":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01464,"percentile":0.73813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-01-30T17:00:00Z","modified":"2026-06-17T00:10:29Z","products":[{"vendor":"huawei","product":"ar1200_firmware"},{"vendor":"huawei","product":"ar150_firmware"},{"vendor":"huawei","product":"ar160_firmware"},{"vendor":"huawei","product":"ar200_firmware"},{"vendor":"huawei","product":"ar2200_firmware"},{"vendor":"huawei","product":"ar3200_firmware"},{"vendor":"huawei","product":"ar530_firmware"},{"vendor":"huawei","product":"netengine16ex_firmware"},{"vendor":"huawei","product":"s5300_firmware"},{"vendor":"huawei","product":"s5700_firmware"},{"vendor":"huawei","product":"s6300_firmware"},{"vendor":"huawei","product":"s6700_firmware"},{"vendor":"huawei","product":"s7700_firmware"},{"vendor":"huawei","product":"s9300_firmware"},{"vendor":"huawei","product":"s9700_firmware"},{"vendor":"huawei","product":"srg1300_firmware"},{"vendor":"huawei","product":"srg2300_firmware"},{"vendor":"huawei","product":"srg3300_firmware"},{"vendor":"huawei","product":"wlan_ac6005_firmware"},{"vendor":"huawei","product":"wlan_ac6605_firmware"},{"vendor":"huawei","product":"wlan_acu2_firmware"}],"references":[{"url":"http://secunia.com/advisories/59349","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Permissions Required"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345171.htm","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4705"},{"url":"https://github.com/advisories/GHSA-7vcf-r2g3-43c4"}],"sources":{"cve":[{"id":"CVE-2014-4705","description":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.","status":"published","published":"2018-01-30T17:00:00Z","modified":"2024-08-06T11:27:36.062Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-4624","description":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.","status":"published","published":"2018-01-30T17:00:00Z","modified":"2024-08-06T11:27:36Z","updated_at":"2026-11-03T01:57:05.7284Z"}],"ghsa":[{"id":"GHSA-7vcf-r2g3-43c4","title":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700,...","description":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.","status":"published","published":"2022-05-14T03:42:00Z","modified":"2023-02-02T05:08:26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:44.806949Z"}],"nvd":[{"id":"CVE-2014-4705","description":"Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.","status":"published","published":"2018-01-30T17:29:00.227Z","modified":"2026-06-17T00:10:29.3Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:59.001778Z"}]}}