CVE-2021-22365

Published: Jun 22, 2021Modified: Nov 21, 2024

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause the process and the service abnormal.

Affected (3)

Products: Huawei: Ese620x Vess Firmware

Huawei

1 product

Ese620x Vess Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ese620x Vess Firmware	Version v100r001c10spc200
Huawei Ese620x Vess Firmware	Version v100r001c20spc200
Huawei Ese620x Vess Firmware	Version v200r001c00spc300

Running on/with	Platform Versions
Huawei Ese620x Vess	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210526-02-outbounds-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210526-02-outbounds-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.