CVEvulnerability

CVE-2021-22411

6.5 MEDIUM Published 2021-05-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-787

Description

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.

Affected configurations

• huawei ngfw module firmware v500r005c00spc100 • huawei ngfw module firmware v500r005c00spc200 • huawei secospace usg6300 firmware v500r001c30spc200 • huawei secospace usg6300 firmware v500r001c30spc600 • huawei secospace usg6300 firmware v500r001c60spc500 • huawei secospace usg6300 firmware v500r005c00spc100 • huawei secospace usg6300 firmware v500r005c00spc200 • huawei secospace usg6500 firmware v500r001c30spc200 • huawei secospace usg6500 firmware v500r001c30spc600 • huawei secospace usg6500 firmware v500r001c60spc500 • huawei secospace usg6500 firmware v500r005c00spc100 • huawei secospace usg6500 firmware v500r005c00spc200 • huawei secospace usg6600 firmware v500r001c30spc200 • huawei secospace usg6600 firmware v500r001c30spc600 • huawei secospace usg6600 firmware v500r001c60spc500 • huawei secospace usg6600 firmware v500r005c00spc100 • huawei secospace usg6600 firmware v500r005c00spc200 • huawei usg9500 firmware v500r001c60spc500 • huawei usg9500 firmware v500r005c00spc100 • huawei usg9500 firmware v500r005c00spc200

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References