CVE-2021-22411
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
Se presenta una vulnerabilidad de escritura fuera de límites en algunos productos de Huawei. El código de un módulo presenta una lógica de juicio erróneo. Unos atacantes pueden explotar esta vulnerabilidad mediante al llevar a cabo múltiples actividades anormales para desencadenar la lógica incorrecta y causar una escritura fuera de límites. Esto puede comprometer el servicio normal de las versiones de producto module.Affected incluyen: versiones NGFW Módulo V500R005C00SPC100, V500R005C00SPC200, versiones Secospace USG6300 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; versiones Secospace USG6500 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; Secospace USG6600 versiones V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; versiones USG9500 V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-05 CVE Reserved
- 2021-05-27 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-02-outofbounds-en | 2021-06-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Ngfw Module Firmware Search vendor "Huawei" for product "Ngfw Module Firmware" | v500r005c00spc100 Search vendor "Huawei" for product "Ngfw Module Firmware" and version "v500r005c00spc100" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ngfw Module Search vendor "Huawei" for product "Ngfw Module" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ngfw Module Firmware Search vendor "Huawei" for product "Ngfw Module Firmware" | v500r005c00spc200 Search vendor "Huawei" for product "Ngfw Module Firmware" and version "v500r005c00spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ngfw Module Search vendor "Huawei" for product "Ngfw Module" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c30spc200 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c30spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c30spc600 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c30spc600" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c60spc500 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c60spc500" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r005c00spc100 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r005c00spc100" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r005c00spc200 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r005c00spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c30spc200 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c30spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c30spc600 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c30spc600" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c60spc500 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c60spc500" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r005c00spc100 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r005c00spc100" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r005c00spc200 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r005c00spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c30spc200 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c30spc600 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30spc600" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c60spc500 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c60spc500" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r005c00spc100 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r005c00spc100" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r005c00spc200 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r005c00spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware" | v500r001c60spc500 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r001c60spc500" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg9500 Search vendor "Huawei" for product "Usg9500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware" | v500r005c00spc100 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r005c00spc100" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg9500 Search vendor "Huawei" for product "Usg9500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware" | v500r005c00spc200 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r005c00spc200" | - |
Affected
| in | Huawei Search vendor "Huawei" | Usg9500 Search vendor "Huawei" for product "Usg9500" | - | - |
Safe
|