Vulnerability Details CVE-2021-22341
There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module V500R005C00SPC100,V500R005C00SPC200;NGFW Module V500R005C00SPC100,V500R005C00SPC200;NIP6300 V500R005C00SPC100,V500R005C10SPC200;NIP6600 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 V500R005C00SPC100,V500R005C10SPC200;Secospace USG6600 V500R005C00SPC100,V500R005C00SPC200.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.7%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 4.0
References
Products affected by CVE-2021-22341
-
cpe:2.3:h:huawei:ips_module:-
-
cpe:2.3:h:huawei:ngfw_module:-
-
cpe:2.3:h:huawei:nip6300:-
-
cpe:2.3:h:huawei:nip6600:-
-
cpe:2.3:h:huawei:secospace_usg6300:-
-
cpe:2.3:h:huawei:secospace_usg6500:-
-
cpe:2.3:h:huawei:secospace_usg6600:-
-
cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200
-
cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200
-
cpe:2.3:o:huawei:nip6300_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:nip6300_firmware:v500r005c10spc200
-
cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc200
-
cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200
-
cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c10spc200
-
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100
-
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200