6.8
CVE-2021-39995
- EPSS 0.16%
- Published 29.11.2021 16:15:07
- Last modified 21.11.2024 06:20:42
- Source psirt@huawei.com
- Teams watchlist Login
- Open Login
Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.
Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Ecns280 Td Firmware Versionv100r005c10
Huawei ≫ Ese620x Vess Firmware Versionv100r001c10spc200
Huawei ≫ Ese620x Vess Firmware Versionv100r001c20spc200
Huawei ≫ Ese620x Vess Firmware Versionv200r001c00spc300
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.341 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 6.8 | 8 | 6.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:C
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.