Vulnerability · Published Oct 27, 2021 · Assigned by huawei

CVE-2021-37122

Medium 6.5

In plain English

A medium-severity security flaw in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)0.3%top 81.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 6800 V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800;CloudEngine 7800 V200R005C10SPC800,V200R019C00SPC800.

Affected products (as reported)

Vendor	Product	Versions
n/a	CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800	V200R005C10SPC800,V200R019C00SPC800V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211008-01-cloudengine-en x_refsource_MISC