CVE-2021-22310

🗓️ 22 Mar 2021 18:38:09Reported by huaweiType

There's an info leakage vulnerability in Huawei products. Improper storage of log file info allows attacker to obtain it on user login. Exploit may cause leak. Affected products: NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG950

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-22310	22 Mar 202121:37	–	circl
CNNVD	Huawei 多款产品日志日志信息泄露漏洞	3 Feb 202100:00	–	cnnvd
CNVD	Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2021-24919)	5 Feb 202100:00	–	cnvd
Cvelist	CVE-2021-22310	22 Mar 202118:38	–	cvelist
EUVD	EUVD-2021-9456	3 Oct 202520:07	–	euvd
Huawei	Security Advisory - Information Leakage Vulnerability in Some Huawei Products	3 Feb 202100:00	–	huawei
NVD	CVE-2021-22310	22 Mar 202119:15	–	nvd
OpenVAS	Huawei Data Communication: Information Leakage Vulnerability in Some Huawei Products (huawei-sa-20210203-01-plaintextlog)	29 Mar 202100:00	–	openvas
OSV	CVE-2021-22310	22 Mar 202119:15	–	osv
Prion	Information disclosure	22 Mar 202119:15	–	prion

NVD

Vulners

Node

huawei nip6300_firmwareMatchv500r001c00

huawei nip6300_firmwareMatchv500r001c20

huawei nip6300_firmwareMatchv500r001c30

AND

huawei nip6300Match-

Node

huawei nip6600_firmwareMatchv500r001c00

huawei nip6600_firmwareMatchv500r001c20

huawei nip6600_firmwareMatchv500r001c30

AND

huawei nip6600Match-

Node

huawei secospace_usg6300_firmwareMatchv500r001c00

huawei secospace_usg6300_firmwareMatchv500r001c20

huawei secospace_usg6300_firmwareMatchv500r001c30

AND

huawei secospace_usg6300Match-

Node

huawei secospace_usg6500_firmwareMatchv500r001c00

huawei secospace_usg6500_firmwareMatchv500r001c20

huawei secospace_usg6500_firmwareMatchv500r001c30

AND

huawei secospace_usg6500Match-

Node

huawei secospace_usg6600_firmwareMatchv500r001c00

huawei secospace_usg6600_firmwareMatchv500r001c20

huawei secospace_usg6600_firmwareMatchv500r001c30

huawei secospace_usg6600_firmwareMatchv500r001c50

huawei secospace_usg6600_firmwareMatchv500r001c60

huawei secospace_usg6600_firmwareMatchv500r001c80

AND

huawei secospace_usg6600Match-

Node

huawei usg9500_firmwareMatchv500r005c00

huawei usg9500_firmwareMatchv500r005c10

AND

huawei usg9500Match-

[
  {
    "product": "NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V500R001C00,V500R001C20,V500R001C30"
      },
      {
        "status": "affected",
        "version": "V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80"
      },
      {
        "status": "affected",
        "version": "V500R005C00,V500R005C10"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en

21 Nov 2024 05:49Current

4.5Medium risk

Vulners AI Score4.5

CVSS 22.1

CVSS 3.14.4

EPSS0.00027

CWE-532