CERTFR-2014-AVI-409
Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans Huawei. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
N/A N/A Huawei OceanStor Dorado2100 versions antérieures à V100R001C00SPCa00
N/A N/A Huawei OceanStor Dorado5100 versions antérieures à V100R001C00SPCa00
N/A N/A Huawei OceanStor S5500T versions antérieures à V100R005C30SPC300
N/A N/A Huawei OceanStor S5600T versions antérieures à V200R002C20SPC100
N/A N/A Huawei OceanStor HVS88T versions antérieures à V100R001C00SPC300
N/A N/A Huawei eSDK Solution versions antérieures à V100R003C30SPC100
N/A N/A Huawei OceanStor S5800T versions antérieures à V200R002C20
N/A N/A Huawei OceanStor S5800T versions antérieures à V100R005C30SPC300
N/A N/A Huawei OceanStor N8500 versions antérieures à V200R001C09SPC502
N/A N/A Huawei OceanStor 6800 V3 versions antérieures à V300R001C10SPC100
N/A N/A Huawei FusionAccess versions antérieures à V100R005C20
N/A N/A Huawei S3300 versions antérieures à V100R006HP0011
N/A N/A Huawei USG9500 versions antérieures à V300R001C01SPH303
N/A N/A Huawei OceanStor S5500T versions antérieures à V200R002C20SPC100
N/A N/A Huawei OceanStor S2900 versions antérieures à V100R005C30SPC300
N/A N/A Huawei OceanStor S6900 versions antérieures à V100R005C30SPC300
N/A N/A Huawei SmartCDN versions antérieures à V100R001C05SPC600T
N/A N/A Huawei OceanStor S2600T versions antérieures à V200R002C00SPC400
N/A N/A Huawei OceanStor S5600T versions antérieures à V100R005C30SPC300
N/A N/A Huawei eSight UC&C versions antérieures à V300R002C00SPC200
N/A N/A Huawei OceanStor 18800 versions antérieures à V100R001C00SPC300
N/A N/A Huawei USG9560 versions antérieures à USG9560 V300R001C01SPH303
N/A N/A Huawei OceanStor S5600T versions antérieures à V200R002C00SPC400
N/A N/A Huawei eSight UC&C versions antérieures à V100R001C20SPC306
N/A N/A Huawei OceanStor HVS85T versions antérieures à V100R001C00SPC300
N/A N/A Huawei OceanStor S3900 versions antérieures à V100R005C30SPC300
N/A N/A Huawei S7700 versions antérieures à V200R006C00SPC300
N/A N/A Huawei HUAWEI S12700 versions antérieures à V200R006C00SPC300
N/A N/A Huawei SoftCo versions antérieures à V200R001C01SPC500
N/A N/A Huawei OceanStor S5800T versions antérieures à V200R002C00SPC400
N/A N/A Huawei OceanStor Dorado2100G2 versions antérieures à V100R001C00SPCa00
N/A N/A Huawei USG9300 versions antérieures à USG9500 V300R001C01SPH303
N/A N/A Huawei TSM versions antérieures à TSM V100R002C07SPC224
N/A N/A Huawei OceanStor 18500 versions antérieures à V100R001C00SPC300
N/A N/A Huawei OceanStor 18800F versions antérieures à V100R001C00SPC300
N/A N/A Huawei OceanStor S6800T versions antérieures à V100R005C30SPC300
N/A N/A Huawei eSight UC&C versions antérieures à V100R001C01SPC303
N/A N/A Huawei OceanStor S6800T versions antérieures à V200R002C20SPC100
N/A N/A Huawei OceanStor S2200T versions antérieures à V100R005C30SPC300
N/A N/A Huawei V200R001C91SPC200 versions antérieures à V200R001C91SPC202
N/A N/A Huawei OceanStor S6800T versions antérieures à V200R002C00SPC400
N/A N/A Huawei OceanStor S2600T versions antérieures à V100R005C30SPC300
N/A N/A Huawei OceanStor S2600T versions antérieures à V200R002C20SPC100
N/A N/A Huawei RSE6500 versions antérieures à V100R001C00SPC200
N/A N/A Huawei TSM versions antérieures à Policy Center V100R003C10
N/A N/A Huawei AP5010DN-AGN versions antérieures à V200R005C10
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Huawei OceanStor Dorado2100 versions ant\u00e9rieures \u00e0 V100R001C00SPCa00",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor Dorado5100 versions ant\u00e9rieures \u00e0 V100R001C00SPCa00",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5500T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5600T versions ant\u00e9rieures \u00e0 V200R002C20SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor HVS88T versions ant\u00e9rieures \u00e0 V100R001C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei eSDK Solution versions ant\u00e9rieures \u00e0 V100R003C30SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5800T versions ant\u00e9rieures \u00e0 V200R002C20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5800T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor N8500 versions ant\u00e9rieures \u00e0 V200R001C09SPC502",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor 6800 V3 versions ant\u00e9rieures \u00e0 V300R001C10SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei FusionAccess versions ant\u00e9rieures \u00e0 V100R005C20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei S3300 versions ant\u00e9rieures \u00e0 V100R006HP0011",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei USG9500 versions ant\u00e9rieures \u00e0 V300R001C01SPH303",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5500T versions ant\u00e9rieures \u00e0 V200R002C20SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S2900 versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S6900 versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei SmartCDN versions ant\u00e9rieures \u00e0 V100R001C05SPC600T",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S2600T versions ant\u00e9rieures \u00e0 V200R002C00SPC400",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5600T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei eSight UC\u0026C versions ant\u00e9rieures \u00e0 V300R002C00SPC200",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor 18800 versions ant\u00e9rieures \u00e0 V100R001C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei USG9560 versions ant\u00e9rieures \u00e0 USG9560 V300R001C01SPH303",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5600T versions ant\u00e9rieures \u00e0 V200R002C00SPC400",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei eSight UC\u0026C versions ant\u00e9rieures \u00e0 V100R001C20SPC306",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor HVS85T versions ant\u00e9rieures \u00e0 V100R001C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S3900 versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei S7700 versions ant\u00e9rieures \u00e0 V200R006C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei HUAWEI S12700 versions ant\u00e9rieures \u00e0 V200R006C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei SoftCo versions ant\u00e9rieures \u00e0 V200R001C01SPC500",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S5800T versions ant\u00e9rieures \u00e0 V200R002C00SPC400",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor Dorado2100G2 versions ant\u00e9rieures \u00e0 V100R001C00SPCa00",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei USG9300 versions ant\u00e9rieures \u00e0 USG9500 V300R001C01SPH303",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei TSM versions ant\u00e9rieures \u00e0 TSM V100R002C07SPC224",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor 18500 versions ant\u00e9rieures \u00e0 V100R001C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor 18800F versions ant\u00e9rieures \u00e0 V100R001C00SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S6800T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei eSight UC\u0026C versions ant\u00e9rieures \u00e0 V100R001C01SPC303",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S6800T versions ant\u00e9rieures \u00e0 V200R002C20SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S2200T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei V200R001C91SPC200 versions ant\u00e9rieures \u00e0 V200R001C91SPC202",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S6800T versions ant\u00e9rieures \u00e0 V200R002C00SPC400",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S2600T versions ant\u00e9rieures \u00e0 V100R005C30SPC300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei OceanStor S2600T versions ant\u00e9rieures \u00e0 V200R002C20SPC100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei RSE6500 versions ant\u00e9rieures \u00e0 V100R001C00SPC200",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei TSM versions ant\u00e9rieures \u00e0 Policy Center V100R003C10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Huawei AP5010DN-AGN versions ant\u00e9rieures \u00e0 V200R005C10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3509"
    },
    {
      "name": "CVE-2014-3505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3505"
    },
    {
      "name": "CVE-2014-3512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3512"
    },
    {
      "name": "CVE-2014-5139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5139"
    },
    {
      "name": "CVE-2014-3511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3511"
    },
    {
      "name": "CVE-2014-3507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3507"
    },
    {
      "name": "CVE-2014-3510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3510"
    },
    {
      "name": "CVE-2014-3508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3508"
    },
    {
      "name": "CVE-2014-3506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3506"
    }
  ],
  "initial_release_date": "2014-10-08T00:00:00",
  "last_revision_date": "2014-10-08T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Huawei Huawei-SA-20141008-OpenSSL du    08 octobre 2014",
      "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm"
    }
  ],
  "reference": "CERTFR-2014-AVI-409",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-10-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eHuawei\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Huawei",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Huawei Huawei-SA-20141008-OpenSSL du 08 octobre 2014",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.