CVE-2021-39995

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
n/aeCNS280_TD;eSE620X vESSV100R005C10; V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300

References

Timeline

Published
Nov 29, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399969.8There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may caCVE-2021-399979.8There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may caCVE-2021-399987.5There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitaCVE-2021-399997.5There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerabilityCVE-2021-40006.1showdoc is vulnerable to URL Redirection to Untrusted SiteCVE-2021-400008.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious commandCVE-2021-400015.3The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to beCVE-2021-400028.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious commandCVE-2021-400035.3HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-400047.5The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentialCVE-2021-400057.5The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect CVE-2021-400064.6Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentialit
CVE-2021-39995: Medium severity, CVSS 6.5 | Vulnix