Description
There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-02-dos-en
Scores
CVSS v3
5.3
EPSS
0.0017
EPSS Percentile
38.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (6)
huawei/manageone
6.5 rc2.b050
huawei/manageone
6.5.0 (2 CPE variants)
huawei/manageone
6.5.1 rc1.b080 (18 CPE variants)
huawei/manageone
6.5.1.1 b010 (4 CPE variants)
huawei/manageone
8.0.0 (7 CPE variants)
huawei/manageone
8.0.1
Published
May 20, 2021
Tracked Since
Feb 18, 2026