ByteOS Network

NVD Vulnerability Details :

CVE-2021-22365

Analyzed

Source-psirt@huawei.com

Published At-22 Jun, 2021 | 18:15

Updated At-29 Jun, 2021 | 15:35

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause the process and the service abnormal.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Huawei Technologies Co., Ltd.

>>ese620x_vess_firmware>>v100r001c10spc200

cpe:2.3:o:huawei:ese620x_vess_firmware:v100r001c10spc200:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>ese620x_vess_firmware>>v100r001c20spc200

cpe:2.3:o:huawei:ese620x_vess_firmware:v100r001c20spc200:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>ese620x_vess_firmware>>v200r001c00spc300

cpe:2.3:o:huawei:ese620x_vess_firmware:v200r001c00spc300:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>ese620x_vess>>-

cpe:2.3:h:huawei:ese620x_vess:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210526-02-outbounds-en	psirt@huawei.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History