CVE-2021-22393
HIGHHuawei CloudEngine 5800, 6800, 7800, and 12800 Firmware - Denial of Service via Specific Message Flood
Title source: llmDescription
There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210324-01-dos-en
Scores
CVSS v3
7.5
EPSS
0.0018
EPSS Percentile
39.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (16)
huawei/cloudengine_12800_firmware
v200r002c50spc800
huawei/cloudengine_12800_firmware
v200r003c00spc810
huawei/cloudengine_12800_firmware
v200r005c00spc800
huawei/cloudengine_12800_firmware
v200r005c10spc800
huawei/cloudengine_5800
v200r002c50spc800
huawei/cloudengine_5800
v200r003c00spc810
huawei/cloudengine_5800
v200r005c00spc800
huawei/cloudengine_5800
v200r005c10spc800
huawei/cloudengine_6800_firmware
v200r002c50spc800
huawei/cloudengine_6800_firmware
v200r003c00spc810
... and 6 more
Published
Apr 28, 2021
Tracked Since
Feb 18, 2026