VulnerabilityModified

CVE-2021-22328

There is a denial of service vulnerability in some huawei products.

HIGH 7.5EPSS 0.68%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800 V200R005C00SPC800, CloudEngine 5800 V200R005C00SPC800, CloudEngine 6800 V200R005C00SPC800, CloudEngine 7800 V200R005C00SPC800.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.68% probability · 50th percentile
CISA KEV: Not listed
Affected: huawei/cloudengine 12800 firmware · huawei/cloudengine 5800 firmware · huawei/cloudengine 6800 firmware · huawei/cloudengine 7800 firmware
Source: psirt@huawei.com

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-dos-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-dos-enVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.