Out-of-bounds

2021-01-1323:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.3%

JSON

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

CPENameOperatorVersion
cloudengine_12800_firmwareeq200r2c50spc800-v
cloudengine_12800_firmwareeq200r3c0spc810-v
cloudengine_12800_firmwareeq200r5c0spc800-v
cloudengine_12800_firmwareeq200r5c10spc800-v
cloudengine_12800_firmwareeq200r19c0spc800-v
cloudengine_12800_firmwareeq200r19c10spc800-v
cloudengine_5800_firmwareeq200r2c50spc800-v
cloudengine_5800_firmwareeq200r3c0spc810-v
cloudengine_5800_firmwareeq200r5c0spc800-v
cloudengine_5800_firmwareeq200r5c10spc800-v

Name	Operator	Version
cloudengine_12800_firmware	eq	200r2c50spc800-v
cloudengine_12800_firmware	eq	200r3c0spc810-v
cloudengine_12800_firmware	eq	200r5c0spc800-v
cloudengine_12800_firmware	eq	200r5c10spc800-v
cloudengine_12800_firmware	eq	200r19c0spc800-v
cloudengine_12800_firmware	eq	200r19c10spc800-v
cloudengine_5800_firmware	eq	200r2c50spc800-v
cloudengine_5800_firmware	eq	200r3c0spc810-v
cloudengine_5800_firmware	eq	200r5c0spc800-v
cloudengine_5800_firmware	eq	200r5c10spc800-v