Vulnerability in Huawei Ips Module
CVE-2021-22342
There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.006 (44.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 45th percentile — 44.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Huawei Ips Module
- Huawei Ips Module Firmware — versions v500r005c00, v500r005c10, v500r005c20
- Huawei Ngfw Module
- Huawei Ngfw Module Firmware — versions v500r005c00, v500r005c10, v500r005c20
- Huawei Semg9811
- Huawei Semg9811 Firmware — versions v500r005c00
- Huawei Usg9500
- Huawei Usg9500 Firmware — versions v500r001c00, v500r001c20, v500r001c30
- Ips Module;ngfw Module;semg9811;usg9500 — versions V500R005C00,V500R005C10,V500R005C20, V500R005C00, V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10,V500R005C20
References
Frequently asked questions
- What is CVE-2021-22342?
- CVE-2021-22342 is a medium-severity vulnerability in Huawei Ips Module. CVSS score: 4.9/10. Published 2021-06-22.
- How severe is CVE-2021-22342?
- Medium severity. CVSS v3 base score is 4.9 out of 10.