Vulnerability in Huawei Ips Module
CVE-2021-22320
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.
EPSS: 0.007 (51.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Ips_module
- Huawei Ips_module_firmware — versions v500r005c00spc100, v500r005c00spc200, v500r005c20spc300
- Huawei Ngfw_module
- Huawei Ngfw_module_firmware — versions v500r005c00spc100, v500r005c00spc200, v500r005c20spc300
- Huawei Nip6600
- Huawei Nip6600_firmware — versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500
- Huawei Nip6800
- Huawei Nip6800_firmware — versions v500r001c60spc500, v500r005c00spc100, v500r005c00spc200
- Huawei Secospace_usg6300
- Huawei Secospace_usg6300_firmware — versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500
References
- psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22320?
- CVE-2021-22320 is a high-severity vulnerability in Huawei Ips Module. CVSS score: 7.5/10. Published 2021-03-22.
- How severe is CVE-2021-22320?
- High severity. CVSS v3 base score is 7.5 out of 10.