HIGH🇵🇱 Wersja polska

CVE-2021-39976

CVSS 7.8v3.1pub. 2021-11-23upd. 2024-11-21

There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Huawei Cloudengine 5800

    HW
    Huawei
    all versions

  • Huawei Cloudengine 5800 Firmware

    OS
    Huawei
    v200r020c00spc600
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2017-17301CRITICAL9.8PL ✓same product

Słaba kryptografia w produktach Huawei — fałszowanie certyfikatów RSA

CVE-2021-40008HIGH7.5same product

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC80...

CVE-2021-22328HIGH7.5same product

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper...

CVE-2021-22393HIGH7.5same product

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine...

CVE-2021-22332HIGH7.5same product

There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngi...