CVE-2021-22332
HIGHHuawei CloudEngine 5800, 6800, 7800, and 12800 Firmware - Use-After-Free via Pointer Double Free
Title source: llmDescription
There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same memory pointer is copied to two functional modules. Attackers can exploit this vulnerability by performing a malicious operation to cause the pointer double free. This may lead to module crash, compromising normal service.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-doublefree-en
Scores
CVSS v3
7.5
EPSS
0.0018
EPSS Percentile
39.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-415
Status
published
Products (16)
huawei/cloudengine_12800_firmware
v200r002c50spc800
huawei/cloudengine_12800_firmware
v200r003c00spc810
huawei/cloudengine_12800_firmware
v200r005c00spc800
huawei/cloudengine_12800_firmware
v200r005c10spc800
huawei/cloudengine_5800_firmware
v200r002c50spc800
huawei/cloudengine_5800_firmware
v200r003c00spc810
huawei/cloudengine_5800_firmware
v200r005c00spc800
huawei/cloudengine_5800_firmware
v200r005c10spc800
huawei/cloudengine_6800_firmware
v200r002c50spc800
huawei/cloudengine_6800_firmware
v200r003c00spc810
... and 6 more
Published
Apr 28, 2021
Tracked Since
Feb 18, 2026