CVE-2021-22328: huawei cloudengine_12800_firmware
Vulnerability summary
CVE-2021-22328 is a high (CVSS 7.5) vulnerability in huawei cloudengine_12800_firmware. EPSS estimates a 0.68% chance of exploitation in the next 30 days, higher than 51.4% of scored vulnerabilities.
Timeline
- 23-08-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800 V200R005C00SPC800, CloudEngine 5800 V200R005C00SPC800, CloudEngine 6800 V200R005C00SPC800, CloudEngine 7800 V200R005C00SPC800.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.68%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.68% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Huawei4 products
- cloudengine_12800_firmwarev200r005c00spc800
- cloudengine_5800_firmwarev200r005c00spc800
- cloudengine_6800_firmwarev200r005c00spc800
- cloudengine_7800_firmwarev200r005c00spc800
1 vendor · 4 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-dos-enX Refsource MISCVendor Advisory