← Back to CVE List
Vulnerability Intelligence Report

CVE-2021-37129

There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could cause out of bounds write leading to a denial of service condition.Affected product versions include:IPS Module V500R005C00,V500R005C20;NGFW Module V500R005C00;NIP6600 V500R005C00,V500R005C20;S12700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600,V200R013C00SPC500,V200R019C00SPC200,V200R019C00SPC500,V200R019C10SPC200,V200R020C00,V200R020C10;S1700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S2700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S5700 V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600,V200R019C00SPC500;S6700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S7700 V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600;S9700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;USG9500 V500R005C00,V500R005C20.

No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:0.66%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
huawei ips_module_firmware v500r005c00, v500r005c20
huawei ips_module all
huawei ngfw_module_firmware v500r005c00
huawei ngfw_module all
huawei nip6600_firmware v500r005c00, v500r005c20
huawei nip6600 all
huawei s12700_firmware v200r010c00spc600, v200r011c10spc500, v200r011c10spc600, v200r013c00spc500, v200r019c00spc200, v200r019c00spc500, v200r019c10spc200, v200r020c00, v200r020c10
huawei s12700 all
huawei s1700_firmware v200r010c00spc600, v200r011c10spc500, v200r011c10spc600
huawei s1700 all
huawei s2700_firmware v200r010c00spc600, v200r011c10spc500, v200r011c10spc600
huawei s2700 all
huawei s5700_firmware v200r010c00spc600, v200r010c00spc700, v200r011c10spc500, v200r011c10spc600, v200r019c00spc500
huawei s5700 all
huawei s6700_firmware v200r010c00spc600, v200r011c10spc500, v200r011c10spc600
huawei s6700 all
huawei s7700_firmware v200r010c00spc600, v200r010c00spc700, v200r011c10spc500, v200r011c10spc600
huawei s7700 all
huawei s9700_firmware v200r010c00spc600, v200r011c10spc500, v200r011c10spc600
huawei s9700 all
huawei usg9500_firmware v500r005c00, v500r005c20
huawei usg9500 all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.655%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityHuawei Technologies · Vendor · China
Reserved2021-07-20T00:00:00
Published2021-10-27T00:41:44
Last Updated2024-08-04T01:16:03

LINK COPIED TO CLIPBOARD