Out-of-Bounds Write Vulnerability in Huawei Network Security Products
CVE-2021-22411

6.5MEDIUM

Key Information:

Vendor
Huawei
Status
Ngfw Module;secospace Usg6300;secospace Usg6500;secospace Usg6600;usg9500
Vendor
CVE Published:
27 May 2021

Summary

An out-of-bounds write vulnerability exists in several Huawei network security products due to flawed code logic within specific modules. By executing a series of abnormal activities, attackers can exploit this flaw to invoke the erroneous logic, leading to potentially harmful out-of-bounds write operations. This vulnerability affects a range of products, including various models from the NGFW Module, Secospace USG6300, USG6500, USG6600, and USG9500 series, which may disrupt their expected functionality and stability.

Affected Version(s)

NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R005C00SPC100,V500R005C00SPC200

NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200

NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.