PT-2021-3500 · Huawei · Huawei Secospace Usg6500+7

Published 2021-05-06 · Updated 2021-07-08 · CVE-2021-22341

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NIP6300 versions V500R005C00SPC100 through V500R005C10SPC200 Huawei NIP6600 versions V500R005C00SPC100 through V500R005C00SPC200 Huawei Secospace USG6300 versions V500R005C00SPC100 through V500R005C00SPC200 Huawei Secospace USG6500 versions V500R005C00SPC100 through V500R005C10SPC200 Huawei Secospace USG6600 versions V500R005C00SPC100 through V500R005C00SPC200

Description A memory leak vulnerability exists in Huawei products due to a resource management weakness in a module. Attackers with high privilege can exploit this vulnerability by performing some operations, leading to a memory leak. This can cause a denial of service.

Recommendations For Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei NIP6300 versions V500R005C00SPC100 through V500R005C10SPC200, update to a fixed version. For Huawei NIP6600 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei Secospace USG6300 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei Secospace USG6500 versions V500R005C00SPC100 through V500R005C10SPC200, update to a fixed version. For Huawei Secospace USG6600 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2021-03530

CVE-2021-22341

Affected Products

Huawei Ips Module

Huawei Ngfw Module

Huawei Nip6300

Huawei Nip6600

Huawei Secospace Usg6300

Huawei Secospace Usg6500

Huawei Secospace Usg6600

Huawei Vrp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-22341 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-memleak-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22341 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03530 · Security Note
• https://t.me/cvenotify/17016 · Telegram Post
• https://t.me/cvenotify/16851 · Telegram Post
• https://t.me/cibsecurity/25806 · Telegram Post