Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.145668
Category:Huawei
Title:Huawei Data Communication: Use After Free Vulnerability in Huawei Product (huawei-sa-20210210-01-uaf)
Summary:There is a use-after-free vulnerability in Huawei products.
Description:Summary:
There is a use-after-free vulnerability in Huawei products.

Vulnerability Insight:
A module cannot deal with specific operations in special scenarios.
Attackers can exploit this vulnerability by performing malicious operations. This can cause memory
use-after-free, compromising normal service.

Vulnerability Impact:
Attackers can exploit this vulnerability by performing malicious operations.
This can cause memory use-after-free, compromising normal service.

Affected Software/OS:
NIP6300 versions V500R001C30 V500R001C60

NIP6600 versions V500R001C30

NIP6800 versions V500R001C60

S12700 versions V200R007C01 V200R007C01B102 V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10

S1700 versions V200R009C00SPC200 V200R009C00SPC500 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10

S2700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10

S5700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 V200R011C10SPC100

S6700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 V200R011C10SPC100

S7700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10

S9700 versions V200R007C01 V200R007C01B102 V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10

Secospace USG6300 versions V500R001C30 V500R001C60

Secospace USG6500 versions V500R001C30 V500R001C60

Secospace USG6600 versions V500R001C30 V500R001C60

USG9500 versions V500R001C30 V500R001C60

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2021-22321
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.