CVE-2021-37122

MEDIUM
6.5
CVSS Score
Published: October 27, 2021 at 12:36 AM UTC
Updated: June 17, 2026 at 04:00 AM UTC
8 products affected across 1 vendorCloudengine 12800 FirmwareCloudengine 6800 FirmwareCloudengine 7800 Firmware

Using CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 by N/A?

Get instant alerts when new vulnerabilities affect CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.3%

Description

There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 6800 V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800;CloudEngine 7800 V200R005C10SPC800,V200R019C00SPC800.

Affected

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card