CVEvulnerability

CVE-2021-22365

3.3 LOW Published 2021-06-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125

Description

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause the process and the service abnormal.

Affected configurations

• huawei ese620x vess firmware v100r001c10spc200 • huawei ese620x vess firmware v100r001c20spc200 • huawei ese620x vess firmware v200r001c00spc300

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References