TI-2014-07886 Aliases CVE-2014-9697 GHSA-6v5w-79qq-mjhg

Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a…

LOW 34CWE-400Published 2017-10-17 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-400.

Summary

Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted website.

Why it matters now

EPSS 0.00807 57th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:usg9560_firmware:v300r001c00:::::::*	v300r001c00	Vulnerable	Huawei
cpe:2.3:o:huawei:usg9560_firmware:v300r001c01spc100:::::::*	v300r001c01spc100	Vulnerable	Huawei
cpe:2.3:h:huawei:usg9560:-:::::::*	not specified by NVD	Running on	Huawei
cpe:2.3:o:huawei:usg9520_firmware:v300r001c00:::::::*	v300r001c00	Vulnerable	Huawei
cpe:2.3:o:huawei:usg9520_firmware:v300r001c01spc100:::::::*	v300r001c01spc100	Vulnerable	Huawei
cpe:2.3:h:huawei:usg9520:-:::::::*	not specified by NVD	Running on	Huawei
cpe:2.3:o:huawei:usg9580_firmware:v300r001c00:::::::*	v300r001c00	Vulnerable	Huawei
cpe:2.3:o:huawei:usg9580_firmware:v300r001c01spc100:::::::*	v300r001c01spc100	Vulnerable	Huawei
cpe:2.3:h:huawei:usg9580:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:usg9560_firmware:v300r001c00:*:*:*:*:*:*:* Versions v300r001c00 Vulnerable ·Huawei
cpe:2.3:o:huawei:usg9560_firmware:v300r001c01spc100:*:*:*:*:*:*:* Versions v300r001c01spc100 Vulnerable ·Huawei
cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
cpe:2.3:o:huawei:usg9520_firmware:v300r001c00:*:*:*:*:*:*:* Versions v300r001c00 Vulnerable ·Huawei
cpe:2.3:o:huawei:usg9520_firmware:v300r001c01spc100:*:*:*:*:*:*:* Versions v300r001c01spc100 Vulnerable ·Huawei
cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
cpe:2.3:o:huawei:usg9580_firmware:v300r001c00:*:*:*:*:*:*:* Versions v300r001c00 Vulnerable ·Huawei
cpe:2.3:o:huawei:usg9580_firmware:v300r001c01spc100:*:*:*:*:*:*:* Versions v300r001c01spc100 Vulnerable ·Huawei
cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2014-9697
2026-10-03 Alias added: GHSA-6v5w-79qq-mjhg

References

Advisory 1

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408141.htm

TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
TI-2017-12652 Improper input validation in Huawei AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160… CVSS 3.0HIGH 7.5
TI-2017-12651 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10… CVSS 3.0HIGH 7.5
TI-2017-12650 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10… CVSS 3.0HIGH 7.5

See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences