CVE-2021-39995

2021-11-2915:34:09

huawei

www.cve.org

huawei

openhpi

denial of service

vulnerability

hardware management

EPSS

0.001

Percentile

35.0%

JSON

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.

CNA Affected

[
  {
    "product": "eCNS280_TD;eSE620X vESS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V100R005C10"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20211124-03-dos-en

EPSS

0.001

Percentile

35.0%

JSON

Related for CVELIST:CVE-2021-39995