NetSight
high7.5

CVE-2021-22393

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800.

Impact

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.

Affected products

VendorProductAffected versions
HuaweiCloudengine 12800 Firmware
Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
HuaweiCloudengine 5800
Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
HuaweiCloudengine 6800 Firmware
Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
HuaweiCloudengine 7800 Firmware
Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800

References