Lucene search

K
cvelistHuaweiCVELIST:CVE-2021-22321
HistoryMar 22, 2021 - 7:03 p.m.

CVE-2021-22321

2021-03-2219:03:52
huawei
www.cve.org
5
use-after-free
huawei
vulnerability
exploit
memory compromise
nip6300
nip6600
nip6800
s1700
s2700
s5700
s6700
s7700
s9700
secospace usg6300
secospace usg6500
secospace usg6600
usg9500

EPSS

0.001

Percentile

39.5%

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

CNA Affected

[
  {
    "product": "NIP6600;NIP6800;S12700;S1700;S2700;S5700;S6700;S7700;S9700;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V500R001C30,V500R001C60"
      },
      {
        "status": "affected",
        "version": "V500R001C30"
      },
      {
        "status": "affected",
        "version": "V500R001C60"
      },
      {
        "status": "affected",
        "version": "V200R007C01,V200R007C01B102,V200R008C00,V200R010C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R009C00SPC200,V200R009C00SPC500,V200R010C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R008C00,V200R010C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R008C00,V200R010C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100"
      }
    ]
  }
]

EPSS

0.001

Percentile

39.5%

Related for CVELIST:CVE-2021-22321