Cloudengine 5800

Vendor:

First CVE: Apr 2, 2017 · Active for 9 years

20

Total CVEs

More Total CVEs than 94% of tracked products

4.0

Avg CVEs / Year

Higher CVE frequency than 83% of tracked products

6.9

Avg CVSS

Higher Avg CVSS than 39% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Cloudengine 5800 over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 2, 2017

9 years ago

Most Recent CVE

Jan 31, 2022

1,635 days ago

CVE Severity & Scoring

Cloudengine 580020 CVEs

40%

50%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local5 (25.0%)

Network12 (60.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network3 (15.0%)

Attack Complexity

Low19 (95.0%)

High1 (5.0%)

Unknown0 (0.0%)

User Interaction

None19 (95.0%)

Unknown0 (0.0%)

Required1 (5.0%)

Privileges Required

Low5 (25.0%)

High1 (5.0%)

None14 (70.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (20 CVEs).

20 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-17301CRITICAL Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R0	Feb 15, 2018	9.8	28	NO	NO
CVE-2021-39976HIGH There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific ope	Nov 23, 2021	7.8	25	NO	NO
CVE-2021-40008HIGH There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00	Dec 13, 2021	7.5	24	NO	NO
CVE-2021-22328HIGH There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. S	Aug 23, 2021	7.5	24	NO	NO
CVE-2021-22332HIGH There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same mem	Apr 28, 2021	7.5	24	NO	NO
CVE-2021-22393HIGH There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with som	Apr 28, 2021	7.5	24	NO	NO
CVE-2020-9207HIGH There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulne	Dec 29, 2020	7.8	24	NO	NO
CVE-2020-9124HIGH There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message	Dec 29, 2020	7.5	24	NO	NO
CVE-2020-9094HIGH There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers can exploit this vulner	Dec 29, 2020	7.5	23	NO	NO
CVE-2021-40042MEDIUM There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: Cloud	Jan 31, 2022	6.5	22	NO	NO

View all 20 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (20 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (20 CVEs).

Media Mentions

Signals from CVEs in this product scope (20 CVEs).

Top CNAs Publishing CVEs For Cloudengine 5800

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
v200r005c10spc800	1	7.5	0.7%
v200r005c00spc800	1	7.5	0.7%
v200r003c00spc810	1	7.5	0.7%
v200r002c50spc800	1	7.5	0.7%