CVE-2014-8572

7.5 · HIGH

Published Apr 2, 2017 huawei CWE-20 EPSS 0.94% (59th pctl) CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2014-8572 is a high-severity vulnerability affecting huawei ac6605_firmware. It was published on April 2, 2017 and has a CVSS 3.0 base score of 7.5 (HIGH).

This vulnerability has a CVSS 3.0 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

Technical Description

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

Remediation

Check the references section for vendor advisories and patches from huawei. Update ac6605_firmware to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Status
huawei	s5300_firmware	Affected
huawei	s5700_firmware	Affected
huawei	s6700_firmware	Affected
huawei	s6300_firmware	Affected
huawei	s7700_firmware	Affected
huawei	s9700_firmware	Affected

References

Ref www.huawei.com/en/psirt/security-advisories/hw-373182 Ref www.huawei.com/en/psirt/security-advisories/hw-373182

Frequently Asked Questions

What is CVE-2014-8572?

CVE-2014-8572 is a high-severity vulnerability affecting huawei ac6605_firmware. It was published on April 2, 2017 and has a CVSS 3.0 base score of 7.5 (HIGH).

How severe is CVE-2014-8572?

This vulnerability has a CVSS 3.0 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2014-8572?

How can CyberStrike help with CVE-2014-8572?

CyberStrike's AI-powered security agents can automatically detect CVE-2014-8572 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.