Huawei AR Series Routers SNMPv3 Denial of Service Vulnerability

Bugtraq ID:	59628
Class:	Boundary Condition Error
CVE:	CVE-2013-4631
Remote:	Yes
Local:	No
Published:	May 02 2013 12:00AM
Updated:	Dec 08 2015 10:15PM
Credit:	Roberto Paleari
Vulnerable:	Huawei CE6850 V100R002C00SPC200 Huawei CE5850 V100R002C00SPC200 Huawei CE5810 V100R002C00SPC200 Huawei CE12800 V100R002C00SPC200 Huawei AR3200 V200R003 Huawei AR3200 V200R002 Huawei AR3200 V200R001 Huawei AR2200 V200R003 Huawei AR2200 V200R002 Huawei AR2200 V200R001 Huawei AR200 V200R003 Huawei AR200 V200R002 Huawei AR200 V200R001 Huawei AR150 V200R003 Huawei AR150 V200R002 Huawei AR150 V200R001 Huawei AR1200 V200R003 Huawei AR1200 V200R002 Huawei AR1200 V200R001
Not Vulnerable:	Huawei CE6850 V100R003C00SPC600B22 Huawei CE5850 V100R003C00SPC600B22 Huawei CE5810 V100R003C00SPC600B22 Huawei CE12800 V100R003C00SPC600B22 Huawei AR3200 V200R003C01SPC300 Huawei AR2200 V200R003C01SPC300 Huawei AR200 V200R003C01SPC300 Huawei AR150 V200R003C01SPC300 Huawei AR1200 V200R003C01SPC300

Huawei AR Series Routers SNMPv3 Denial of Service Vulnerability

Huawei AR Series Routers routers are prone to a denial-of-service vulnerability.

Remote attackers may exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

Huawei AR Series Routers SNMPv3 Denial of Service Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/59628.py

Huawei AR Series Routers SNMPv3 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Huawei AR Series Routers SNMPv3 Denial of Service Vulnerability

References:

• Huawei Technologies Homepage (Huawei Technologies)