Vulnerability Description
There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 12800 | - |
| Huawei | Cloudengine 5800 | v200r002c50spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 6800 | - |
| Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 7800 | - |
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210324-01-dos-enVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210324-01-dos-enVendor Advisory
FAQ
What is CVE-2021-22393?
CVE-2021-22393 is a vulnerability with a CVSS score of 7.5 (HIGH). There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because o...
How severe is CVE-2021-22393?
CVE-2021-22393 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-22393?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 12800 Firmware, Huawei Cloudengine 12800, Huawei Cloudengine 5800, Huawei Cloudengine 6800 Firmware, Huawei Cloudengine 6800.