Improper input validation in AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300…
Priority LOW 35CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.
Why it matters now
EPSS 0.00943 61st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions, | AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions, | — | No fix listed | CNA |
- AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions, Vendor— Affected AC6605,AC6605,ACU,S2300, S3300,S2700, S3700,S5300, S5700,S6300, S6700,S7700, S9300,S9300E, S9700, AC6605 AC6605 V200R001C00, AC6605 V200R002C00,ACU ACU V200R001C00, ACU V200R002C00,S2300, S3300, V100R006C05 and earlier versions,S2700, S3700,S5300, S5700, V100R006,?S6300, S6700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions,S7700, S9300, V100R006,S9300E, S9700 V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions, Fixed in — No fix listed CNA
CPE configurations NVD · 59
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r001c00:*:*:*:*:*:*:* | ac6605_v200r001c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r002c00:*:*:*:*:*:*:* | ac6605_v200r002c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:acu_firmware:acu_v200r001c00:*:*:*:*:*:*:* | acu_v200r001c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:acu_firmware:acu_v200r002c00:*:*:*:*:*:*:* | acu_v200r002c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:acu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s_series_firmware:v100r006c05:*:*:*:*:*:*:* | v100r006c05 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r001c00:*:*:*:*:*:*:* Versions ac6605_v200r001c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ac6605_firmware:ac6605_v200r002c00:*:*:*:*:*:*:* Versions ac6605_v200r002c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:acu_firmware:acu_v200r001c00:*:*:*:*:*:*:* Versions acu_v200r001c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:acu_firmware:acu_v200r002c00:*:*:*:*:*:*:* Versions acu_v200r002c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:acu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s_series_firmware:v100r006c05:*:*:*:*:*:*:* Versions v100r006c05 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 49 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:huawei:s3700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5300_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s5700_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s6700_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6700_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6700_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6700_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6700_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s6300_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6300_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6300_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6300_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s6300_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s6300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s7700_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s7700_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s7700_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s7700_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9700_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9700_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9700_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9700_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:s9300e_firmware:*:*:*:*:*:*:*:* | up to v200r005c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300e_firmware:v100r006:*:*:*:*:*:*:* | v100r006 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300e_firmware:v200r001:*:*:*:*:*:*:* | v200r001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300e_firmware:v200r002:*:*:*:*:*:*:* | v200r002 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:s9300e_firmware:v200r003:*:*:*:*:*:*:* | v200r003 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:s9300e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:h:huawei:s3700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5300_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s5700_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s6700_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6700_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6700_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6700_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6700_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s6300_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6300_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6300_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6300_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s6300_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s6300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s7700_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s7700_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s7700_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s7700_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9700_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9700_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9700_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9700_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:s9300e_firmware:*:*:*:*:*:*:*:* Versions up to v200r005c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300e_firmware:v100r006:*:*:*:*:*:*:* Versions v100r006 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300e_firmware:v200r001:*:*:*:*:*:*:* Versions v200r001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300e_firmware:v200r002:*:*:*:*:*:*:* Versions v200r002 Vulnerable ·Huawei
- cpe:2.3:o:huawei:s9300e_firmware:v200r003:*:*:*:*:*:*:* Versions v200r003 Vulnerable ·Huawei
- cpe:2.3:h:huawei:s9300e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2014-8572
- 2026-10-03 Alias added: GHSA-93vh-8m8m-25c2
References
More Huawei Ac6605 Firmware vulnerabilities
- TI-2017-05722 Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine… CVSS 3.0HIGH 7.5
- TI-2017-01942 AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS… CVSS 3.0HIGH 7.5
- TI-2016-05862 Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before… CVSS 3.0MEDIUM 6.5
Sources
- CVE-2014-8572 · CVE Program
- CVE-2014-8572 · NVD
- FIRST EPSS
- GHSA-93vh-8m8m-25c2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences