Vulnerability Details CVE-2021-22342
There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.7%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 4.0
References
Products affected by CVE-2021-22342
-
cpe:2.3:h:huawei:ips_module:-
-
cpe:2.3:h:huawei:ngfw_module:-
-
cpe:2.3:h:huawei:semg9811:-
-
cpe:2.3:h:huawei:usg9500:-
-
cpe:2.3:o:huawei:ips_module_firmware:v500r005c00
-
cpe:2.3:o:huawei:ips_module_firmware:v500r005c10
-
cpe:2.3:o:huawei:ips_module_firmware:v500r005c20
-
cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00
-
cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c10
-
cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c20
-
cpe:2.3:o:huawei:semg9811_firmware:v500r005c00
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c00
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c20
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c30
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c50
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c60
-
cpe:2.3:o:huawei:usg9500_firmware:v500r001c80
-
cpe:2.3:o:huawei:usg9500_firmware:v500r005c00
-
cpe:2.3:o:huawei:usg9500_firmware:v500r005c10
-
cpe:2.3:o:huawei:usg9500_firmware:v500r005c20