NetSight
medium4.9

CVE-2021-22341

There is a memory leak vulnerability in Huawei products.

Impact

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module V500R005C00SPC100,V500R005C00SPC200;NGFW Module V500R005C00SPC100,V500R005C00SPC200;NIP6300 V500R005C00SPC100,V500R005C10SPC200;NIP6600 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 V500R005C00SPC100,V500R005C10SPC200;Secospace USG6600 V500R005C00SPC100,V500R005C00SPC200.

Affected products

VendorProductAffected versions
HuaweiIps Module Firmware
Versions v500r005c00spc100, v500r005c00spc200
HuaweiNgfw Module Firmware
Versions v500r005c00spc100, v500r005c00spc200
HuaweiNip6300 Firmware
Versions v500r005c00spc100, v500r005c10spc200
HuaweiNip6600 Firmware
Versions v500r005c00spc100, v500r005c00spc200
HuaweiSecospace Usg6300 Firmware
Versions v500r005c00spc100, v500r005c00spc200
HuaweiSecospace Usg6500 Firmware
Versions v500r005c00spc100, v500r005c10spc200
HuaweiSecospace Usg6600 Firmware
Versions v500r005c00spc100, v500r005c00spc200

Weakness classification

References