CVE-2014-4705: Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5...

Security readout for executives and security teams

This CVE describes a remote packet-handling flaw in Huawei eSap-based switches, routers, and WLAN controllers. A malformed packet can restart affected devices, causing network disruption. The provided sources do not include CVSS, confirmed fixed versions, or evidence of exploitation. Exposure is limited to organizations running the named Huawei Campus switch series, AR/NetEngine/SRG router series, or AC6005, AC6605, and ACU2 WLAN controllers. The bundle does not provide CPEs, exact versions, or fixed releases. Treat this as an operational resilience issue for Huawei network infrastructure. Urgency depends on whether named devices are deployed and exposed to untrusted traffic. Confirm exposure first, then follow Huawei guidance. Mitigation focus: Check Huawei PSIRT advisory HW-345171 for affected versions and fixed software.; Prioritize vendor-supported firmware updates during a maintenance window.; Limit exposure of affected device interfaces to trusted networks only..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.