Vulnerability · Published Jun 22, 2021 · Assigned by huawei
CVE-2021-22365
Low 3.3
In plain English
A low-severity security flaw in eSE620X vESS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS NVD)3.3Low
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause the process and the service abnormal.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | eSE620X vESS | V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300 |