CVE-2021-40042

published 2022-01-31

CVE-2021-40042: There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product…

Priority P4 33 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
huawei	cloudengine_12800_firmware	—	—
huawei	cloudengine_12800_firmware	—	—
huawei	cloudengine_5800_firmware	—	—
huawei	cloudengine_5800_firmware	—	—
huawei	cloudengine_6800_firmware	—	—
huawei	cloudengine_6800_firmware	—	—
huawei	cloudengine_6800_firmware	—	—
huawei	cloudengine_6800_firmware	—	—
huawei	cloudengine_7800_firmware	—	—

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-763