CVE-2021-40033

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 31, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-400347.5The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may CVE-2021-400357.5There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Success CVE-2021-400369.8The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execut CVE-2021-400375.5There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successfu CVE-2021-400387.5There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service inte CVE-2021-400397.5There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may aff CVE-2021-400407.5Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect c CVE-2021-400414.2There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation CVE-2021-400426.5There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. CVE-2021-400437.8The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot CVE-2021-400448.8There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorize CVE-2021-400455.5There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this