medium6.5
CVE-2021-39995
Some Huawei products use the OpenHpi software for hardware management.
Impact
Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ecns280 Td Firmware | Version v100r005c10 |
| Huawei | Ese620x Vess Firmware | Versions v100r001c10spc200, v100r001c20spc200, v200r001c00spc300 |