Vulnerability Description
There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to insufficient validation of packets. Successful exploit could cause a denial of service condition.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ese620X Vess Firmware | v100r001c10spc200 |
| Huawei | Ese620X Vess | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211201-01-bufferVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211201-01-bufferVendor Advisory
FAQ
What is CVE-2021-39999?
CVE-2021-39999 is a vulnerability with a CVSS score of 7.5 (HIGH). There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to i...
How severe is CVE-2021-39999?
CVE-2021-39999 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-39999?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ese620X Vess Firmware, Huawei Ese620X Vess.