VulnerabilityModified

CVE-2021-40033

There is an information exposure vulnerability on several Huawei Products.

MEDIUM 5.5EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.17% probability · 7th percentile
CISA KEV: Not listed
Affected: huawei/cloudengine 12800 firmware · huawei/cloudengine 5800 firmware · huawei/cloudengine 6800 firmware · huawei/cloudengine 7800 firmware
Source: psirt@huawei.com

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-enVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.