5.3

CVE-2021-22362

There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient validation of message, successful exploit can cause certain service abnormal.Affected product versions include:CloudEngine 12800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 5800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800@;CloudEngine 6800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 7800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Cloudengine 12800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r019c10spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r019c10spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c20spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r019c10spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r019c10spc800
   Huawei ≫ Cloudengine 7800 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.477
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-01-cloudengine-en
Vendor Advisory