Lucene search

[email protected]CVE-2021-40033

HistoryJan 31, 2022 - 4:15 p.m.

CVE-2021-40033

2022-01-3116:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-40033

information exposure

vulnerability

huawei products

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.

CPENameOperatorVersion
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c10spc800
huawei:cloudengine_5800_firmwarehuawei cloudengine 5800 firmwareeqv200r005c10spc800
huawei:cloudengine_5800_firmwarehuawei cloudengine 5800 firmwareeqv200r019c00spc800
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r005c10spc800
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r005c20spc800
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r019c00spc800
huawei:cloudengine_7800_firmwarehuawei cloudengine 7800 firmwareeqv200r005c10spc800
huawei:cloudengine_7800_firmwarehuawei cloudengine 7800 firmwareeqv200r019c00spc800

CPE	Name	Operator	Version
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c10spc800
huawei:cloudengine_5800_firmware	huawei cloudengine 5800 firmware	eq	v200r005c10spc800
huawei:cloudengine_5800_firmware	huawei cloudengine 5800 firmware	eq	v200r019c00spc800
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r005c10spc800
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r005c20spc800
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r019c00spc800
huawei:cloudengine_7800_firmware	huawei cloudengine 7800 firmware	eq	v200r005c10spc800
huawei:cloudengine_7800_firmware	huawei cloudengine 7800 firmware	eq	v200r019c00spc800

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-en

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2021-40033

cnvd1 prion1 cvelist1 openvas1 huawei1