Summaryinfo

A vulnerability identified as critical has been detected in Huawei AR Router 150, 200, 1200, 2200 and 3200 V200R001/V200R002/V200R003. The affected element is an unknown function of the component SNMPv3. Performing a manipulation as part of Packet results in memory corruption. This vulnerability is cataloged as CVE-2013-4630. Furthermore, there is an exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Huawei AR Router 150, 200, 1200, 2200 and 3200 V200R001/V200R002/V200R003 (Router Operating System). It has been classified as critical. This affects some unknown functionality of the component SNMPv3. The manipulation as part of a Packet leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests.

The weakness was shared 03/13/2013 by Roberto Paleari with Emaze Networks S.p.A as Huawei-SA-20130313-01 as not defined advisory (Website). It is possible to read the advisory at huawei.com. The vendor cooperated in the coordination of the public release. This vulnerability is uniquely identified as CVE-2013-4630 since 06/20/2013. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are unknown but a public exploit is available.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $25k-$100k.

Upgrading eliminates this vulnerability. Applying the patch ARV200R002SPC006 is able to eliminate this problem. The bugfix is ready for download at support.huawei.com. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (25295) and OSVDB (93041†). The entry VDB-8591 is related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Huawei

Name

• 200
• 1200
• 2200
• 3200
• AR Router 150

Version

• V200R001
• V200R002
• V200R003

License

• commercial

Website

• Vendor: https://www.huawei.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion