Known vulnerabilities in Huawei CloudEngine 12800

Vendor: Huawei
Software: Huawei CloudEngine 12800
Software CPE: cpe:2.3:h:huawei:huawei_cloudengine_12800:*:*:*:*:*:*:*:*
Website: https://www.huawei.com
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Huawei CloudEngine 12800 Huawei CloudEngine 12800 is affected by 19 known vulnerabilities: 8 medium, 11 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40033		 CWE-200 Low
No
No
 V200R005SPH021 20.01.2022 SB2022012009
#VU59870 - Release of invalid pointer or reference
CVE-2021-40042		 CWE-763 Medium
No
No
 V200R019SPH007 20.01.2022 SB2022012005
#VU58750 - Missing release of memory after effective lifetime
CVE-2021-40008		 CWE-401 Medium
No
No
 V200R019SPH002 09.12.2021 SB2021120903
#VU57183 - Use After Free
CVE-2021-37122		 CWE-416 Low
No
No
 V200R005SPH027, V200R019C10SPC800 11.10.2021 SB2021101105
#VU53361 - Memory corruption
CVE-2021-22362		 CWE-119 Low
No
No
 V200R005C10SPC800 + V200R005SPH026, V200R019C10SPC800 + V200R019SPH006 19.05.2021 SB2021051929
#VU51958 - Double Free
CVE-2021-22332		 CWE-415 Medium
No
No
 V200R005SPH025 07.04.2021 SB2021040708
#VU51749 - Improper input validation
CVE-2021-22393		 CWE-20 Low
No
No
 V200R005C10SPC800+V200R005SPH026 29.03.2021 SB2021032902
#VU49226 - Out-of-bounds read
CVE-2020-1865		 CWE-125 Low
No
No
 V200R005C10SPC800+V200R005SPH026, V200R019C10SPC800+V200R019SPH006 04.01.2021 SB2020120211
#VU49047 - Improper Authentication
CVE-2020-9207		 CWE-287 Medium
No
No
 V200R019C10SPC800 17.12.2020 SB20200716108
#VU49046 - Out-of-bounds read
CVE-2020-9094		 CWE-125 Medium
No
No
 V200R019C10SPC800 17.12.2020 SB20200716108
#VU48749 - Permissions, Privileges, and Access Controls
CVE-2020-9137		 CWE-264 Low
No
No
 V200R005C10SPC800+V200R005SPH026, V200R019C10SPC800+V200R019SPH006 02.12.2020 SB2020120211
#VU30119 - Exposure of sensitive information to an unauthorized actor
CVE-2020-9102		 CWE-200 Low
No
No
 V200R019C10SPC800 16.07.2020 SB20200716108
#VU28291 - Missing release of memory after effective lifetime
CVE-2020-1870		 CWE-401 Medium
No
No
 V200R019C10SPC800 27.05.2020 SB2020052715
#VU25433 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1861		 CWE-200 Low
No
No
 V200R005C10SPC800 19.02.2020 SB2020021901
#VU24341 - Integer overflow
CVE-2019-19413		 CWE-190 Medium
No
No
 V200R003C00SPC810 16.01.2020 SB2020011606
#VU24340 - Integer overflow
CVE-2019-19413		 CWE-190 Medium
No
No
 V200R003C00SPC810 16.01.2020 SB2020011606
#VU24101 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-1810		 CWE-327 Low
No
No
 V200R019C00SPC800 08.01.2020 SB2020010808
#VU23419 - Insufficient Verification of Data Authenticity
CVE-2019-5291		 CWE-345 Low
No
No
 V200R02C5SPC800 05.12.2019 SB2019120510
#VU23398 - Missing release of memory after effective lifetime
CVE-2019-5248		 CWE-401 Low
No
No
 V200R003C00SPC810 04.12.2019 SB2019120421