medium5.3
CVE-2021-22321
There is a use-after-free vulnerability in a Huawei product.
Impact
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Nip6300 Firmware | Versions v500r001c30, v500r001c60 |
| Huawei | Nip6600 Firmware | Version v500r001c30 |
| Huawei | Nip6800 Firmware | Version v500r001c60 |
| Huawei | S12700 Firmware | Versions v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00 |
| Huawei | S1700 Firmware | Versions v200r009c00spc200, v200r009c00spc500, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100 |
| Huawei | S2700 Firmware | Versions v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 |
| Huawei | S5700 Firmware | Versions v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 |
| Huawei | S6700 Firmware | Versions v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 |
| Huawei | S7700 Firmware | Versions v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 |
| Huawei | S9700 Firmware | Versions v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00 |
| Huawei | Secospace Usg6300 Firmware | Versions v500r001c30, v500r001c60 |
| Huawei | Secospace Usg6500 Firmware | Versions v500r001c30, v500r001c60 |