Huawei s9300e Firmware vulnerabilities

4 CVEs affecting Huawei s9300e Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-5394, published 2018-01-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-5394, published 2018-01-08. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
CVE-2014-8572, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and…
CVE-2014-4706, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software…
CVE-2014-8570, published 2017-04-02. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with…