Vulnerability · Published Jun 22, 2021 · Assigned by huawei

CVE-2021-22342

Medium 4.9

In plain English

A medium-severity security flaw in IPS Module;NGFW Module;SeMG9811;USG9500. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS NVD)4.9Medium

Exploit odds (30 days)0.6%top 53.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

Affected products (as reported)

Vendor	Product	Versions
n/a	IPS Module;NGFW Module;SeMG9811;USG9500	V500R005C00,V500R005C10,V500R005C20V500R005C00V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10,V500R005C20

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-infomationleak-en x_refsource_MISC