First published: Mon Jan 31 2022(Updated: )
There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Cloudengine 12800 Firmware | =v200r019c10spc800 | |
Huawei Cloudengine 12800 Firmware | =v200r019c10spc900 | |
Huawei CloudEngine 12800 | ||
Huawei Cloudengine 5800 Firmware | =v200r019c10spc800 | |
Huawei Cloudengine 5800 Firmware | =v200r020c00spc600 | |
Huawei CloudEngine 5800 | ||
Huawei Cloudengine 6800 Firmware | =v200r019c10spc800 | |
Huawei Cloudengine 6800 Firmware | =v200r019c10spc900 | |
Huawei Cloudengine 6800 Firmware | =v200r020c00spc600 | |
Huawei Cloudengine 6800 Firmware | =v300r020c00spc200 | |
Huawei CloudEngine 6800 | ||
Huawei Cloudengine 7800 Firmware | =v200r019c10spc800 | |
Huawei Cloudengine 7800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-40042 is a release of invalid pointer vulnerability in some Huawei products that can cause process and service abnormalities.
The affected Huawei products include CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; and CloudEngine 7800 V200R019C10SPC800.
CVE-2021-40042 has a severity rating of 6.5 (Medium).
To fix CVE-2021-40042, users should follow the recommendations provided in the official Huawei Security Advisory, which can be found at the provided reference link.
More information about CVE-2021-40042 can be found in the official Huawei Security Advisory, available at the provided reference link.