Vulnerabilities > CVE-2021-40042 - Release of Invalid Pointer or Reference vulnerability in Huawei products

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
huawei
CWE-763
NVD
Published: 2022-01-31
Updated: 2022-02-04

Summary

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.

Vulnerable Configurations

Part Description Count
OS
Huawei
9
Hardware
Huawei
4

Common Weakness Enumeration (CWE)

References