CVE-2014-4190: Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300...

Security readout for executives and security teams

CVE-2014-4190 can make listed Huawei campus switches restart when they receive a specially crafted packet. For an organization relying on these switches, the business risk is network outage rather than confirmed data theft. The public bundle does not show active exploitation. Exposure is limited to organizations running the named Huawei Campus Series switch models on the listed vulnerable software trains. Internet exposure is not established in the bundle; internal network reachability may still matter because the trigger is a crafted packet. Treat this as a reliability and availability issue for network infrastructure. Prioritize affected core, distribution, or campus switches where restart could disrupt business operations, while noting there is no cited evidence of active exploitation. Mitigation focus: Inventory Huawei switch models and software versions against the CVE description.; Upgrade V200R001 systems to V200R001SPH013 or later.; Upgrade V200R002 systems to V200R002SPH005 or later..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.