Security readout for executives and security teams
Plain-English summary
This CVE describes a denial-of-service issue in specified Huawei switch products. An affected module may fail when it receives specially crafted messages because input validation is insufficient. The available sources do not provide CVSS scoring, business impact detail, or evidence of active exploitation.
Executive priority
Treat this as an availability risk for environments using the listed Huawei switches. Priority depends on where those devices sit in the network and whether resilient design limits business disruption. Evidence is incomplete, so verify exposure before escalating broadly.
Technical view
CVE-2021-22357 affects Huawei S12700, S5700, S6700, and S7700 versions V200R013C00SPC500 and V200R019C00SPC500. The flaw is insufficient input validation in a module that cannot properly handle specific messages, potentially causing denial of service.
Likely exposure
Exposure is most likely in networks operating the listed Huawei S-series switch models and exact software versions. The source bundle does not identify the affected module, protocol, network path, or whether default configurations are vulnerable.
Exploitation context
The record says attackers can trigger denial of service by sending specific messages to the affected module. There is no KEV listing and no cited source in the bundle showing active exploitation in the wild.
Researcher notes
Public detail is limited. The sources identify product lines, versions, vulnerability class, and DoS outcome, but not CVSS, CWE, packet path, module name, preconditions, authentication requirements, or fixed versions in the provided bundle.
Mitigation direction
- Inventory Huawei S12700, S5700, S6700, and S7700 switches and confirm software versions.
- Review the Huawei PSIRT advisory for vendor-approved fixes or workarounds.
- Prioritize vendor-supported updates where Huawei identifies corrected releases.
- Limit untrusted access to switch management and control-plane interfaces.
- Monitor affected devices for crashes, restarts, or unexplained service interruption.
Validation and detection
- Compare running versions against V200R013C00SPC500 and V200R019C00SPC500.
- Check asset inventory for the listed Huawei S-series models.
- Review network monitoring for denial-of-service symptoms on affected switches.
- Confirm whether Huawei guidance has been applied and documented.
- Track remediation status per device, site, and business-critical network segment.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-22357 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210512-01-dos-enCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.