CVE-2021-37129

🗓️ 27 Oct 2021 00:41:44Reported by huaweiType

There is an out of bounds write vulnerability in some Huawei products caused by a function of a module that does not properly verify input parameter

Reporter	Title	Published	Views	Family All 11
CNNVD	Huawei Ngfw Module 缓冲区错误漏洞	15 Oct 202100:00	–	cnnvd
CNVD	Multiple Huawei products cross the border to write vulnerabilities	18 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-37129	27 Oct 202100:41	–	cvelist
EUVD	EUVD-2021-23705	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Out of Bounds Write Vulnerability in Some Huawei Products	20 Oct 202100:00	–	huawei
NCSC	Vulnerability fixed in Huawei S5700 switch series	20 Oct 202100:00	–	ncsc
NVD	CVE-2021-37129	27 Oct 202101:15	–	nvd
OpenVAS	Huawei Data Communication: Out of Bounds Write Vulnerability in Some Huawei Products (huawei-sa-20211020-01-outofwrite)	29 Oct 202100:00	–	openvas
OSV	CVE-2021-37129	27 Oct 202101:15	–	osv
Prion	Cross site scripting	27 Oct 202101:15	–	prion

NVD

Vulners

Node

huawei ips_module_firmwareMatchv500r005c00

huawei ips_module_firmwareMatchv500r005c20

AND

huawei ips_moduleMatch-

Node

huawei ngfw_module_firmwareMatchv500r005c00

AND

huawei ngfw_moduleMatch-

Node

huawei nip6600_firmwareMatchv500r005c00

huawei nip6600_firmwareMatchv500r005c20

AND

huawei nip6600Match-

Node

huawei s12700_firmwareMatchv200r010c00spc600

huawei s12700_firmwareMatchv200r011c10spc500

huawei s12700_firmwareMatchv200r011c10spc600

huawei s12700_firmwareMatchv200r013c00spc500

huawei s12700_firmwareMatchv200r019c00spc200

huawei s12700_firmwareMatchv200r019c00spc500

huawei s12700_firmwareMatchv200r019c10spc200

huawei s12700_firmwareMatchv200r020c00

huawei s12700_firmwareMatchv200r020c10

AND

huawei s12700Match-

Node

huawei s1700_firmwareMatchv200r010c00spc600

huawei s1700_firmwareMatchv200r011c10spc500

huawei s1700_firmwareMatchv200r011c10spc600

AND

huawei s1700Match-

Node

huawei s2700_firmwareMatchv200r010c00spc600

huawei s2700_firmwareMatchv200r011c10spc500

huawei s2700_firmwareMatchv200r011c10spc600

AND

huawei s2700Match-

Node

huawei s5700_firmwareMatchv200r010c00spc600

huawei s5700_firmwareMatchv200r010c00spc700

huawei s5700_firmwareMatchv200r011c10spc500

huawei s5700_firmwareMatchv200r011c10spc600

huawei s5700_firmwareMatchv200r019c00spc500

AND

huawei s5700Match-

Node

huawei s6700_firmwareMatchv200r010c00spc600

huawei s6700_firmwareMatchv200r011c10spc500

huawei s6700_firmwareMatchv200r011c10spc600

AND

huawei s6700Match-

Node

huawei s7700_firmwareMatchv200r010c00spc600

huawei s7700_firmwareMatchv200r010c00spc700

huawei s7700_firmwareMatchv200r011c10spc500

huawei s7700_firmwareMatchv200r011c10spc600

AND

huawei s7700Match-

Node

huawei s9700_firmwareMatchv200r010c00spc600

huawei s9700_firmwareMatchv200r011c10spc500

huawei s9700_firmwareMatchv200r011c10spc600

AND

huawei s9700Match-

Node

huawei usg9500_firmwareMatchv500r005c00

huawei usg9500_firmwareMatchv500r005c20

AND

huawei usg9500Match-

[
  {
    "product": "IIPS Module;NGFW Module;NIP6600;S12700;S1700;S2700;S5700;S6700;S7700;S9700;USG9500",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V500R005C00,V500R005C20"
      },
      {
        "status": "affected",
        "version": "V500R005C00"
      },
      {
        "status": "affected",
        "version": "V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600,V200R013C00SPC500,V200R019C00SPC200,V200R019C00SPC500,V200R019C10SPC200,V200R020C00,V200R020C10"
      },
      {
        "status": "affected",
        "version": "V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600"
      },
      {
        "status": "affected",
        "version": "V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600,V200R019C00SPC500"
      },
      {
        "status": "affected",
        "version": "V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20211020-01-outofwrite-en

21 Nov 2024 06:14Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00182

CWE-787