There is a denial of service vulnerability in some Huawei products.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Timeline
- CVE published
- Record last updated
Affected versions
- Huawei CloudEngine 12800
V200R019C00SPC800
- Huawei CloudEngine 5800
V200R019C00SPC800
- Huawei CloudEngine 6800
V200R005C20SPC800, V200R019C00SPC800
- Huawei CloudEngine 7800
V200R019C00SPC800
- Huawei NE40E
V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100
- Huawei NE40E-F
V800R011C00SPC200, V800R011C10SPC100
- Huawei NE40E-M
V800R011C00SPC200, V800R011C10SPC100