CVE-2013-4630
UnknownEPSS 3.91%
Last modified
CVE-2013-4630 is a vulnerability of currently unknown severity. Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests.. EPSS estimates a 3.91% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ar 1200 | v200r001 |
| Huawei | Ar 1200 | v200r002 |
| Huawei | Ar 1200 | v200r003 |
| Huawei | Ar 150 | v200r001 |
| Huawei | Ar 150 | v200r002 |
| Huawei | Ar 150 | v200r003 |
| Huawei | Ar 200 | v200r001 |
| Huawei | Ar 200 | v200r002 |
| Huawei | Ar 200 | v200r003 |
| Huawei | Ar 2200 | v200r001 |
| Huawei | Ar 2200 | v200r002 |
| Huawei | Ar 2200 | v200r003 |
| Huawei | Ar 3200 | v200r001 |
| Huawei | Ar 3200 | v200r002 |
| Huawei | Ar 3200 | v200r003 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4630?
Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests.
How severe is CVE-2013-4630?
Severity scoring for CVE-2013-4630 is pending analysis. The EPSS model estimates a 3.91% probability of exploitation in the next 30 days.
How do I fix CVE-2013-4630?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4624Multiple cross-site scripting (XSS) vulnerabilities in Jahia…
- CVE-2013-4625Cross-site scripting (XSS) vulnerability in files/installer.…
- CVE-2013-4626Cross-site scripting (XSS) vulnerability in the BackWPup plu…
- CVE-2013-4627Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x a…
- CVE-2013-4628The firewall module on the Huawei Quidway Service Process Un…
- CVE-2013-4629The Huawei viewpoint VP9610 and VP9620 units for the Huawei …
- CVE-2013-4631Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv…
- CVE-2013-4632The Huawei Access Router (AR) before V200R002SPC003 allows r…
- CVE-2013-4633Huawei Seco Versatile Security Manager (VSM) before V200R002…
- CVE-2013-4634SQL injection vulnerability in the jQuery autocomplete for i…
- CVE-2013-4635Integer overflow in the SdnToJewish function in jewish.c in …
- CVE-2013-4636The mget function in libmagic/softmagic.c in the Fileinfo co…
Are you affected by CVE-2013-4630?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST