Security Advisory-A DoS Vulnerability in the SSH Module on Huawei AR Router
- SA No:Huawei-SA-20131228-01-AR
- Initial Release Date: Dec 28, 2013
- Last Release Date: Feb 11, 2014
On Some Huawei AR routers that receive a large number of SSH authentication attack packets with malformed data, legitimate users fail to log in through SSH. Attackers can construct massive attack packets to cause the AR routers to deny SSH login from legitimate users. (HWPSIRT-2013-1255).
This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-1687.
|
AR Router series products |
|
|
AR150/AR200/AR1200/AR2200/AR3200 |
V200R002C01SPC200 and earlier versions |
|
V200R002C01SPC200 and earlier versions |
After an attacker launches denial of service (DoS) attacks, legitimate users fail to log in through SSH.
The vulnerability classification has been performed by using the CVSSv2 scoring system (http://www.first.org/cvss/).
Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Temporal Score: 4.1 (E:F/RL:O/RC:C)
1. Prerequisite:
The attackers are reachable to the device
2. Attacking procedure:
An attacker sends massive SSH authentication attack packets with malformed data to an AR router with the vulnerability and legitimate users fail to log in through SSH.
When an AR router encounters SSH DoS attacks, users can use other login modes, such as Web, Telnet, or the console port, to log in to the AR router.
Upgrading version and upgrading date:
|
Product name |
Solved version |
Solved time |
|
AR150/AR200/AR1200/AR2200/AR3200 |
V200R002SPC003 |
Released |
|
V200R003C01SPC300 |
|
V200R002C01SPC200 and earlier versions |
This vulnerability is found by Huawei internal test engineer. The Huawei PSIRT is not aware of any public announcements or malicious use of the vulnerability described in this advisory.
For security problems about Huawei products and solutions, please contactPSIRT@huawei.com.
For general problems about Huawei products and solutions, please directly contact Huawei TAC (Huawei Technical Assistance Center) to request the configuration or technical assistance.
2014-02-11 V1.1 UPDATED update the information of CVE-ID
2013-12-28 V1.0 INITIAL
None
