CVE-2021-22310

Published: Mar 22, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.

Affected (20)

Products: Huawei: Nip6300 Firmware, Nip6600 Firmware, Secospace Usg6300 Firmware, Secospace Usg6500 Firmware, Secospace Usg6600 Firmware, Usg9500 Firmware

Huawei

6 products

Nip6300 Firmware

Nip6600 Firmware

Secospace Usg6300 Firmware

Secospace Usg6500 Firmware

Secospace Usg6600 Firmware

Usg9500 Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6300 Firmware	Version v500r001c00
Huawei Nip6300 Firmware	Version v500r001c20
Huawei Nip6300 Firmware	Version v500r001c30

Running on/with	Platform Versions
Huawei Nip6300	All versions

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6600 Firmware	Version v500r001c00
Huawei Nip6600 Firmware	Version v500r001c20
Huawei Nip6600 Firmware	Version v500r001c30

Running on/with	Platform Versions
Huawei Nip6600	All versions

Configuration C

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6300 Firmware	Version v500r001c00
Huawei Secospace Usg6300 Firmware	Version v500r001c20
Huawei Secospace Usg6300 Firmware	Version v500r001c30

Running on/with	Platform Versions
Huawei Secospace Usg6300	All versions

Configuration D

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6500 Firmware	Version v500r001c00
Huawei Secospace Usg6500 Firmware	Version v500r001c20
Huawei Secospace Usg6500 Firmware	Version v500r001c30

Running on/with	Platform Versions
Huawei Secospace Usg6500	All versions

Configuration E

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6600 Firmware	Version v500r001c00
Huawei Secospace Usg6600 Firmware	Version v500r001c20
Huawei Secospace Usg6600 Firmware	Version v500r001c30
Huawei Secospace Usg6600 Firmware	Version v500r001c50
Huawei Secospace Usg6600 Firmware	Version v500r001c60
Huawei Secospace Usg6600 Firmware	Version v500r001c80