CVE-2021-40042: Huawei Cloudengine 12800 Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.

Affected products

  • Huawei Cloudengine 12800 Firmware: version v200r019c10spc800 only; version v200r019c10spc900 only
  • Huawei Cloudengine 5800 Firmware: version v200r019c10spc800 only; version v200r020c00spc600 only
  • Huawei Cloudengine 6800 Firmware: version v200r019c10spc800 only; version v200r019c10spc900 only; version v200r020c00spc600 only; version v300r020c00spc200 only
  • Huawei Cloudengine 7800 Firmware: version v200r019c10spc800 only

Published 2022-01-31. Last modified 2026-06-17.