Lucene search

[email protected]CVE-2021-40042

HistoryJan 31, 2022 - 4:15 p.m.

CVE-2021-40042

2022-01-3116:15:00

CWE-763

[email protected]

web.nvd.nist.gov

huawei

vulnerability

abnormal process

service

cve-2021-40042

cloudengine 12800

cloudengine 5800

cloudengine 6800

cloudengine 7800

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

34.7%

JSON

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.

CPENameOperatorVersion
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r019c10spc800
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r019c10spc900
huawei:cloudengine_5800_firmwarehuawei cloudengine 5800 firmwareeqv200r019c10spc800
huawei:cloudengine_5800_firmwarehuawei cloudengine 5800 firmwareeqv200r020c00spc600
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r019c10spc800
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r019c10spc900
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv200r020c00spc600
huawei:cloudengine_6800_firmwarehuawei cloudengine 6800 firmwareeqv300r020c00spc200
huawei:cloudengine_7800_firmwarehuawei cloudengine 7800 firmwareeqv200r019c10spc800

CPE	Name	Operator	Version
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r019c10spc800
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r019c10spc900
huawei:cloudengine_5800_firmware	huawei cloudengine 5800 firmware	eq	v200r019c10spc800
huawei:cloudengine_5800_firmware	huawei cloudengine 5800 firmware	eq	v200r020c00spc600
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r019c10spc800
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r019c10spc900
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v200r020c00spc600
huawei:cloudengine_6800_firmware	huawei cloudengine 6800 firmware	eq	v300r020c00spc200
huawei:cloudengine_7800_firmware	huawei cloudengine 7800 firmware	eq	v200r019c10spc800

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invalid-en

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

34.7%

JSON

Related for CVE-2021-40042

cvelist1 prion1 cnvd1 openvas1 huawei1