CVE-2021-40008: Huawei Cloudengine 12800 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.

Affected products

• Huawei Cloudengine 12800 Firmware: version v200r019c00spc800 only
• Huawei Cloudengine 5800 Firmware: version v200r019c00spc800 only
• Huawei Cloudengine 6800 Firmware: version v200r019c00spc800 only
• Huawei Cloudengine 7800 Firmware: version v200r019c00spc800 only

Published 2021-12-13. Last modified 2026-06-17.