Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-22362

EPSS 0.18% · P39
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-22362

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient validation of message, successful exploit can cause certain service abnormal.Affected product versions include:CloudEngine 12800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 5800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800@;CloudEngine 6800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 7800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei CloudEngine 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei CloudEngine 12800等都是中国华为(Huawei)公司的产品。Huawei CloudEngine 12800是一款12800系列数据中心交换机。Huawei Cloudengine 5800是一款5800系列数据中心交换机。Huawei Cloudengine 6800是一款6800系列数据中心交换机。 Huawei CloudEngine 存在缓冲区错误漏洞,该漏洞源于对报文数据的不充分校验,攻击者可利用该漏洞可以通过对目标设备发送篡改的报文方式来触发该漏洞。以下产品和版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800 -

II. Public POCs for CVE-2021-22362

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-22362

登录查看更多情报信息。

Same Patch Batch · n/a · 2021-05-27 · 74 CVEs total

CVE-2020-22025FFmpeg 缓冲区错误漏洞
CVE-2020-14329Red Hat Ansible 信息泄露漏洞
CVE-2020-10688Red Hat Resteasy 跨站脚本漏洞
CVE-2020-22033FFmpeg 缓冲区错误漏洞
CVE-2020-22032FFmpeg 缓冲区错误漏洞
CVE-2020-22016FFmpeg 缓冲区错误漏洞
CVE-2020-22017FFmpeg 缓冲区错误漏洞
CVE-2021-33394Devellion Cubecart 授权问题漏洞
CVE-2020-22022FFmpeg 缓冲区错误漏洞
CVE-2020-22023FFmpeg 缓冲区错误漏洞
CVE-2020-10697Red Hat Ansible 安全漏洞
CVE-2020-22027FFmpeg 缓冲区错误漏洞
CVE-2020-22030FFmpeg 缓冲区错误漏洞
CVE-2020-22029FFmpeg 缓冲区错误漏洞
CVE-2020-22031FFmpeg 缓冲区错误漏洞
CVE-2021-27490Siemens Solid Edge 缓冲区错误漏洞
CVE-2021-27492Siemens Solid Edge 代码问题漏洞
CVE-2021-27488Siemens Solid Edge 缓冲区错误漏洞
CVE-2021-27496Siemens Solid Edge 安全漏洞
CVE-2021-27494Siemens Solid Edge 安全漏洞

Showing top 20 of 74 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-22362

No comments yet


Leave a comment