Out of Bounds Read Vulnerability in Huawei eSE620X Products
CVE-2021-22365

3.3LOW

Key Information:

Vendor
Huawei
Status
Ese620x Vess
Vendor
CVE Published:
22 June 2021

Summary

The eSE620X product series from Huawei contains a vulnerability that allows local attackers to exploit an out of bounds read by sending specifically crafted messages to the target device. This issue arises due to inadequate validation of internal messages, which can lead to abnormal service interruptions and process failures. It is vital for network administrators to assess the potential risks and implement recommended security practices to mitigate exposure to this vulnerability.

Affected Version(s)

eSE620X vESS V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.