PT-2021-14955 · Huawei · Huawei Ips Module+7

Published 2021-02-10 · Updated 2021-03-26 · CVE-2021-22320

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Huawei IPS Module (affected versions not specified) Huawei NGFW Module (affected versions not specified) Huawei NIP6600 (affected versions not specified) Huawei NIP6800 (affected versions not specified) Huawei Secospace USG6300 (affected versions not specified) Huawei Secospace USG6500 (affected versions not specified) Huawei Secospace USG6600 (affected versions not specified)

Description: There is a denial of service issue in Huawei products. A module cannot handle specific messages correctly. Attackers can exploit this by sending malicious messages to an affected module, leading to denial of service.

Recommendations: For Huawei IPS Module, consider disabling the module that handles specific messages until a fix is available. For Huawei NGFW Module, restrict access to the module that deals with message processing to minimize the risk of exploitation. For Huawei NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, and Secospace USG6600, avoid using the affected modules until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2021-22320

Affected Products

Huawei Ips Module

Huawei Ngfw Module

Huawei Nip6600

Huawei Nip6800

Huawei Secospace Usg6300

Huawei Secospace Usg6500

Huawei Secospace Usg6600

Huawei Vrp

References · 4

• https://osv.dev/vulnerability/CVE-2021-22320 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22320 · Security Note
• https://t.me/cibsecurity/25251 · Telegram Post