← Back

CVE-2021-22411

nvd nist
Published: May 27, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.

Affected (20)

5 products
Ngfw Module Firmware
Secospace Usg6300 Firmware
Secospace Usg6500 Firmware
Secospace Usg6600 Firmware
Usg9500 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Version v500r005c00spc100
Version v500r005c00spc200
Running on/withPlatform Versions
Huawei
Ngfw Module
All versions
Configuration B
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Version v500r001c30spc200
Version v500r001c30spc600
Version v500r001c60spc500
Version v500r005c00spc100
Version v500r005c00spc200
Running on/withPlatform Versions
Huawei
Secospace Usg6300
All versions
Configuration C
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Version v500r001c30spc200
Version v500r001c30spc600
Version v500r001c60spc500
Version v500r005c00spc100
Version v500r005c00spc200
Running on/withPlatform Versions
Huawei
Secospace Usg6500
All versions
Configuration D
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Version v500r001c30spc200
Version v500r001c30spc600
Version v500r001c60spc500
Version v500r005c00spc100
Version v500r005c00spc200
Running on/withPlatform Versions
Huawei
Secospace Usg6600
All versions
Configuration E
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Version v500r001c60spc500
Version v500r005c00spc100
Version v500r005c00spc200
Running on/withPlatform Versions
Huawei
Usg9500
All versions

Timeline

No history available yet.