high
7.5
Advisory Published
Updated

CVE-2021-22393

First published: Wed Apr 28 2021(Updated: )

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei Cloudengine 12800 Firmware=v200r002c50spc800
Huawei Cloudengine 12800 Firmware=v200r003c00spc810
Huawei Cloudengine 12800 Firmware=v200r005c00spc800
Huawei Cloudengine 12800 Firmware=v200r005c10spc800
Huawei CloudEngine 12800
Huawei CloudEngine 5800=v200r002c50spc800
Huawei CloudEngine 5800=v200r003c00spc810
Huawei CloudEngine 5800=v200r005c00spc800
Huawei CloudEngine 5800=v200r005c10spc800
Huawei CloudEngine 5800
Huawei Cloudengine 6800 Firmware=v200r002c50spc800
Huawei Cloudengine 6800 Firmware=v200r003c00spc810
Huawei Cloudengine 6800 Firmware=v200r005c00spc800
Huawei Cloudengine 6800 Firmware=v200r005c10spc800
Huawei CloudEngine 6800
Huawei Cloudengine 7800 Firmware=v200r002c50spc800
Huawei Cloudengine 7800 Firmware=v200r003c00spc810
Huawei Cloudengine 7800 Firmware=v200r005c00spc800
Huawei Cloudengine 7800 Firmware=v200r005c10spc800
Huawei Cloudengine 7800

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2021-22393?

    CVE-2021-22393 is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, and CloudEngine 12800.

  • How does the CVE-2021-22393 vulnerability work?

    Attackers can exploit the CVE-2021-22393 vulnerability by sending a large amount of specific messages to the affected product, which cannot handle them properly due to a module design weakness.

  • What is the severity of CVE-2021-22393?

    CVE-2021-22393 has a severity rating of 7.5, which is considered high.

  • Which products are affected by CVE-2021-22393?

    The vulnerability affects versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, and CloudEngine 12800.

  • How can I fix the CVE-2021-22393 vulnerability?

    To fix the CVE-2021-22393 vulnerability, it is recommended to update to a version of the affected product that is not vulnerable. Check the vendor's security advisory for specific patch information.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203