CVE-2021-40033 - CVE House
Back to Database
Status published Medium CVE-2021-40033

There is an information exposure vulnerability on several Huawei Products....

Vulnerability Description

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-40033

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8
CVE-2017-17254
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00,...
High 7.5

Affected Vendor

Affected Software

cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware, cloudengine 7800 firmware
Vulnerable Versions:
v200r005c10spc800, v200r019c00spc800, v200r005c20spc800

Timeline

Official Publish: January 31st, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.