What’s Vulnerable › Vulnerabilities

CVE-2021-40042

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-31 · updated 2026-06-17
• Weakness: CWE-763

Description

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.

Affected products

• CloudEngine 12800: v200r019c10spc800, v200r019c10spc900
• CloudEngine 5800: v200r019c10spc800, v200r020c00spc600
• Huawei Cloudengine 6800 Firmware: v200r019c10spc800, v200r019c10spc900, v200r020c00spc600, v300r020c00spc200
• Huawei Cloudengine 7800 Firmware: v200r019c10spc800

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invalid-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invalid-en

Get alerted when CVE-2021-40042 or the next vulnerability affects your stack