Vulnerability in Huawei Ips Module
CVE-2021-22342
There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.
EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Huawei Ips_module
- Huawei Ips_module_firmware — versions v500r005c00, v500r005c10, v500r005c20
- Huawei Ngfw_module
- Huawei Ngfw_module_firmware — versions v500r005c00, v500r005c10, v500r005c20
- Huawei Semg9811
- Huawei Semg9811_firmware — versions v500r005c00
- Huawei Usg9500
- Huawei Usg9500_firmware — versions v500r001c00, v500r001c20, v500r001c30
- N/a Ips Module;ngfw Module;semg9811;usg9500 — versions V500R005C00,V500R005C10,V500R005C20, V500R005C00, V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10,V500R005C20
References
- psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22342?
- CVE-2021-22342 is a medium-severity vulnerability in Huawei Ips Module. CVSS score: 4.9/10. Published 2021-06-22.
- How severe is CVE-2021-22342?
- Medium severity. CVSS v3 base score is 4.9 out of 10.