Lucene search
+L

102 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.13 views

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 arises from the improper handling of pointers, allowing attackers to trigger service failures.

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 relates to the exploitation of incorrect pointers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through...

6.8CVSS6.5AI score0.00562EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:0 a.m.8 views

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control mechanisms, allowing attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00172EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/02/01 12:0 a.m.16 views

Information Exposure Vulnerability on Several Huawei Products (huawei-sa-20220112-01-infodis)

There is an information exposure vulnerability on several Huawei Products. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

5.5CVSS5.5AI score0.00169EPSS
Exploits0References1
NVD
NVD
added 2022/01/31 4:15 p.m.28 views

CVE-2021-40033

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800;...

5.5CVSS0.00169EPSS
Exploits0References1
OSV
OSV
added 2022/01/31 4:15 p.m.7 views

CVE-2021-40033

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800;...

5.5CVSS5.8AI score0.00169EPSS
Exploits0References1
Prion
Prion
added 2022/01/31 4:15 p.m.25 views

Information disclosure

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800;...

2.1CVSS5.2AI score0.00169EPSS
Exploits0References1Affected Software4
CVE
CVE
added 2022/01/31 3:57 p.m.76 views

CVE-2021-40042

CVE-2021-40042 is an invalid pointer vulnerability affecting Huawei CloudEngine devices (12800: V200R019C10SPC800/SPC900; 5800: V200R019C10SPC800, V200R020C00SPC600; 6800: V200R019C10SPC800/900, V200R020C00SPC600, V300R020C00SPC200; 7800: V200R019C10SPC800). Root cause: invalid pointer dereferenc...

6.5CVSS6.4AI score0.00562EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/31 3:57 p.m.47 views

CVE-2021-40042

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine...

6.6AI score0.00562EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.7 views

HuaWei 多款产品信息泄露漏洞

Huawei CloudEngine 12800 is a 12800 series data center switch, Huawei Cloudengine 5800 is a 5800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data cente...

5.5CVSS5.6AI score0.00169EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.24 views

Huawei 多款产品缓冲区错误漏洞

The Huawei CloudEngine 12800 is a 12800 series data center switch, and the Huawei Cloudengine 5800 is a 5800 series data center switch. Buffer overflow vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of certain parameters in messages, which ca...

6.5CVSS5.7AI score0.00562EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/12/16 12:0 a.m.17 views

Memory Leak Vulnerability in Huawei Products (huawei-sa-20211208-01-memleak)

There is a memory leak vulnerability in Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

7.5CVSS7AI score0.00655EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/13 4:15 p.m.3 views

CVE-2021-40008

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary...

7.5CVSS7.1AI score0.00655EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/11/24 12:0 a.m.18 views

Huawei Data Communication: Use-after-free Vulnerability in Huawei Products (huawei-sa-20211008-01-cloudengine)

There is a use-after-free UAF vulnerability in Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

6.5CVSS7.1AI score0.0026EPSS
Exploits0References1
OSV
OSV
added 2021/10/27 1:15 a.m.5 views

CVE-2021-37122

There is a use-after-free UAF vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800...

6.5CVSS5.8AI score0.0026EPSS
Exploits0References1
NVD
NVD
added 2021/10/27 1:15 a.m.33 views

CVE-2021-37122

There is a use-after-free UAF vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800...

6.5CVSS0.0026EPSS
Exploits0References1
Prion
Prion
added 2021/10/27 1:15 a.m.20 views

Design/Logic Flaw

There is a use-after-free UAF vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800...

3.3CVSS6.4AI score0.0026EPSS
Exploits0References1Affected Software4
CVE
CVE
added 2021/10/27 12:36 a.m.75 views

CVE-2021-37122

CVE-2021-37122 is a confirmed use-after-free (UAF) vulnerability disclosed in Huawei CloudEngine products. Affected models include CloudEngine 12800 (V200R005C10SPC800, V200R019C00SPC800), 5800 (V200R005C10SPC800, V200R019C00SPC800), 6800 (V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800),...

6.5CVSS6.3AI score0.0026EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/08/25 12:0 a.m.37 views

Multiple Huawei CloudEngine Products Denial of Service Vulnerabilities

Huawei CloudEngine 12800 is a 12800 series data center switch. Huawei Cloudengine 5800 is a 5800 series data center switch from Huawei, China. Huawei CloudEngine 6800 is a 6800 series 10GbE switch for data centers. A denial-of-service vulnerability exists in several Huawei CloudEngine products,...

7.5CVSS2.4AI score0.00677EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/08/24 12:0 a.m.19 views

Denial of Service Vulnerability in Some Huawei Products (huawei-sa-20210407-01-dos)

There is a denial of service vulnerability in some Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.5AI score0.00677EPSS
Exploits0References1
OSV
OSV
added 2021/08/23 8:15 p.m.5 views

CVE-2021-22328

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800...

7.5CVSS5.8AI score0.00677EPSS
Exploits0References1
Rows per page
Query Builder