PT-2022-11155 · Huawei · Cloudengine 12800+4

Published 2022-01-19 · Updated 2022-02-04 · CVE-2021-40033

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 version V200R005C10SPC800 Huawei CloudEngine 5800 versions V200R005C10SPC800, V200R019C00SPC800 Huawei CloudEngine 6800 versions V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800 Huawei CloudEngine 7800 versions V200R005C10SPC800, V200R019C00SPC800

Description The issue is due to the software not properly protecting certain information, which could lead to information disclosure if successfully exploited.

Recommendations For Huawei CloudEngine 12800 version V200R005C10SPC800, update to a version that properly protects sensitive information. For Huawei CloudEngine 5800 versions V200R005C10SPC800, V200R019C00SPC800, update to a version that properly protects sensitive information. For Huawei CloudEngine 6800 versions V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800, update to a version that properly protects sensitive information. For Huawei CloudEngine 7800 versions V200R005C10SPC800, V200R019C00SPC800, update to a version that properly protects sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-40033

Affected Products

Cloudengine 12800

Cloudengine 5800

Cloudengine 6800

Cloudengine 7800

Huawei Vrp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-40033 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40033 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-en · Vendor Advisory
• https://t.me/cvenotify/26072 · Telegram Post
• https://t.me/cibsecurity/36588 · Telegram Post