Lucene search

K
nvd[email protected]NVD:CVE-2021-22312
HistoryApr 08, 2021 - 7:15 p.m.

CVE-2021-22312

2021-04-0819:15:12
CWE-401
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.2%

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Affected configurations

NVD
Node
huaweiips_moduleMatch-
AND
huaweiips_module_firmwareMatchv500r005c00spc100
OR
huaweiips_module_firmwareMatchv500r005c00spc200
Node
huaweingfw_moduleMatch-
AND
huaweingfw_module_firmwareMatchv500r005c00spc100
OR
huaweingfw_module_firmwareMatchv500r005c00spc200
Node
huaweisecospace_usg6300Match-
AND
huaweisecospace_usg6300_firmwareMatchv500r001c30spc200
OR
huaweisecospace_usg6300_firmwareMatchv500r001c30spc600
OR
huaweisecospace_usg6300_firmwareMatchv500r001c60spc500
OR
huaweisecospace_usg6300_firmwareMatchv500r005c00spc100
OR
huaweisecospace_usg6300_firmwareMatchv500r005c00spc200
Node
huaweisecospace_usg6500Match-
AND
huaweisecospace_usg6500_firmwareMatchv500r001c30spc200
OR
huaweisecospace_usg6500_firmwareMatchv500r001c30spc600
OR
huaweisecospace_usg6500_firmwareMatchv500r001c60spc500
OR
huaweisecospace_usg6500_firmwareMatchv500r005c00spc100
OR
huaweisecospace_usg6500_firmwareMatchv500r005c00spc200
Node
huaweisecospace_usg6600Match-
AND
huaweisecospace_usg6600_firmwareMatchv500r001c30spc200
OR
huaweisecospace_usg6600_firmwareMatchv500r001c30spc600
OR
huaweisecospace_usg6600_firmwareMatchv500r001c60spc500
OR
huaweisecospace_usg6600_firmwareMatchv500r005c00spc100
OR
huaweisecospace_usg6600_firmwareMatchv500r005c00spc200
Node
huaweiusg9500Match-
AND
huaweiusg9500_firmwareMatchv500r001c30spc200
OR
huaweiusg9500_firmwareMatchv500r001c30spc600
OR
huaweiusg9500_firmwareMatchv500r001c60spc500
OR
huaweiusg9500_firmwareMatchv500r005c00spc100
OR
huaweiusg9500_firmwareMatchv500r005c00spc200
Node
huaweinip6300Match-
AND
huaweinip6300_firmwareMatchv500r001c30spc200
OR
huaweinip6300_firmwareMatchv500r001c30spc600
OR
huaweinip6300_firmwareMatchv500r001c60spc500
OR
huaweinip6300_firmwareMatchv500r005c00spc100
OR
huaweinip6300_firmwareMatchv500r005c00spc200
Node
huaweinip6600Match-
AND
huaweinip6600_firmwareMatchv500r001c30spc200
OR
huaweinip6600_firmwareMatchv500r001c30spc600
OR
huaweinip6600_firmwareMatchv500r001c60spc500
OR
huaweinip6600_firmwareMatchv500r005c00spc100
OR
huaweinip6600_firmwareMatchv500r005c00spc200
Node
huaweinip6800_firmwareMatchv500r001c30spc200
OR
huaweinip6800_firmwareMatchv500r001c30spc600
OR
huaweinip6800_firmwareMatchv500r001c60spc500
OR
huaweinip6800_firmwareMatchv500r005c00spc100
OR
huaweinip6800_firmwareMatchv500r005c00spc200
AND
huaweinip6800Match-
Node
huaweiusg6000e_firmwareMatchv600r006c00
AND
huaweiusg6000eMatch-
Node
huaweinip6000e_firmwareMatchv600r006c00
AND
huaweinip6000eMatch-
Node
huaweiips6000e_firmwareMatchv600r006c00
AND
huaweiips6000eMatch-

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.2%

Related for NVD:CVE-2021-22312