Vulnerability · Published Feb 6, 2021 · Assigned by huawei
CVE-2021-22304
Low 3.3
In plain English
A low-severity security flaw in Taurus-AL00A. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS NVD)3.3Low
Exploit odds (30 days)0.2%top 88.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Taurus-AL00A | 10.0.0.1(C00E1R1P1) |