Vulnerability · Published Aug 23, 2021 · Assigned by huawei

CVE-2021-22328

High 7.5

In plain English

A high-severity security flaw in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.7%top 47.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800 V200R005C00SPC800, CloudEngine 5800 V200R005C00SPC800, CloudEngine 6800 V200R005C00SPC800, CloudEngine 7800 V200R005C00SPC800.

Affected products (as reported)

Vendor	Product	Versions
n/a	CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800	V200R005C00SPC800

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-dos-en x_refsource_MISC