Cyber Resilience

CVE-2021-22393

High

Published: 28 April 2021

Published
28 April 2021
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0018 39.7th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-22393 is a high-severity an unspecified weakness vulnerability in Huawei Cloudengine 5800. Its CVSS base score is 7.5 (High).

Operationally, ranked at the 39.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by…

more

sending a large amount of specific messages to cause denial of service. This can compromise normal service.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

huawei
cloudengine 12800 firmware
v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
huawei
cloudengine 5800
v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
huawei
cloudengine 6800 firmware
v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800
huawei
cloudengine 7800 firmware
v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References