Multiple buffer overflows in Huawei products - CVE-2014-9223

Detailed vulnerability description

The vulnerabilities allow a remote attacker to execute arbitrary code on the target system.

The vulnerabilities exist due to a boundary error when handling user-supplied data. A remote attacker can send a specially crafted HTTP request to vulnerable web server, trigger buffer overflow and cause a denial of service condition or execute arbitrary code on the target system.

Successful exploitation of this vulnerability will result in compromise of the affected system.

How to mitigate CVE-2014-9223

Sources

• https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-le...
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm