CVE-2021-22362
Summary
| CVE | CVE-2021-22362 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-05-27 13:15:00 UTC |
| Updated | 2021-06-08 00:42:00 UTC |
| Description | There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient validation of message, successful exploit can cause certain service abnormal.Affected product versions include:CloudEngine 12800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 5800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800@;CloudEngine 6800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 7800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 5800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c10spc800 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Out of Bounds Write Vulnerability in Huawei CloudEngine Product | MISC | www.huawei.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.