HIGH · 7.5

CVE-2021-22393

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because o...

Vulnerability Description

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiCloudengine 12800 Firmwarev200r002c50spc800
HuaweiCloudengine 12800-
HuaweiCloudengine 5800v200r002c50spc800
HuaweiCloudengine 6800 Firmwarev200r002c50spc800
HuaweiCloudengine 6800-
HuaweiCloudengine 7800 Firmwarev200r002c50spc800
HuaweiCloudengine 7800-

References

FAQ

What is CVE-2021-22393?

CVE-2021-22393 is a vulnerability with a CVSS score of 7.5 (HIGH). There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because o...

How severe is CVE-2021-22393?

CVE-2021-22393 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22393?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 12800 Firmware, Huawei Cloudengine 12800, Huawei Cloudengine 5800, Huawei Cloudengine 6800 Firmware, Huawei Cloudengine 6800.