high7.5
CVE-2021-22320
There is a denial of service vulnerability in Huawei products.
Impact
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ips Module Firmware | Versions v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |
| Huawei | Ngfw Module Firmware | Versions v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |
| Huawei | Nip6600 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |
| Huawei | Nip6800 Firmware | Versions v500r001c60spc500, v500r005c00spc100, v500r005c00spc200, v500r005c20spc300, v500r005c20spc500 |
| Huawei | Secospace Usg6300 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |
| Huawei | Secospace Usg6500 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |
| Huawei | Secospace Usg6600 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100, v500r005c00spc200, v500r005c20spc300 |