CVE-2021-22341

published 2021-06-29

CVE-2021-22341: There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this…

Priority P4 22 medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C N I N A H

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module V500R005C00SPC100,V500R005C00SPC200;NGFW Module V500R005C00SPC100,V500R005C00SPC200;NIP6300 V500R005C00SPC100,V500R005C10SPC200;NIP6600 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 V500R005C00SPC100,V500R005C10SPC200;Secospace USG6600 V500R005C00SPC100,V500R005C00SPC200.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
huawei	ips_module_firmware	—	—
huawei	ips_module_firmware	—	—
huawei	ngfw_module_firmware	—	—
huawei	ngfw_module_firmware	—	—
huawei	nip6300_firmware	—	—
huawei	nip6300_firmware	—	—
huawei	nip6600_firmware	—	—
huawei	nip6600_firmware	—	—
huawei	secospace_usg6300_firmware	—	—
huawei	secospace_usg6300_firmware	—	—
huawei	secospace_usg6500_firmware	—	—
huawei	secospace_usg6500_firmware	—	—
huawei	secospace_usg6600_firmware	—	—
huawei	secospace_usg6600_firmware	—	—

CVSS provenance

nvd v3.1 4.9 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401