CVE-2021-22321

EPSS 0.72%
Veröffentlicht 22.03.2021 20:15:17
Zuletzt bearbeitet 21.11.2024 05:49:54
Erkennungen
Login

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 61 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Nip6300 Firmware Version v500r001c30

Huawei ≫ Nip6300 Version -

Huawei ≫ Nip6300 Firmware Version v500r001c60

Huawei ≫ Nip6300 Version -

Huawei ≫ Nip6600 Firmware Version v500r001c30

Huawei ≫ Nip6600 Version -

Huawei ≫ Nip6800 Firmware Version v500r001c60

Huawei ≫ Nip6800 Version -

Huawei ≫ S12700 Firmware Version v200r007c01

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r007c01b102

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r008c00

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r010c00

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r010c00spc300

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r011c00

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r011c00spc100

Huawei ≫ S12700 Version -

Huawei ≫ S12700 Firmware Version v200r011c10

Huawei ≫ S12700 Version -

Huawei ≫ S1700 Firmware Version v200r009c00spc200

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r009c00spc500

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r010c00

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r010c00spc300

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r011c00

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r011c00spc100

Huawei ≫ S1700 Version -

Huawei ≫ S1700 Firmware Version v200r011c10

Huawei ≫ S1700 Version -

Huawei ≫ S2700 Firmware Version v200r008c00

Huawei ≫ S2700 Version -

Huawei ≫ S2700 Firmware Version v200r010c00

Huawei ≫ S2700 Version -

Huawei ≫ S2700 Firmware Version v200r010c00spc300

Huawei ≫ S2700 Version -

Huawei ≫ S2700 Firmware Version v200r011c00

Huawei ≫ S2700 Version -

Huawei ≫ S2700 Firmware Version v200r011c00spc100

Huawei ≫ S2700 Version -

Huawei ≫ S2700 Firmware Version v200r011c10

Huawei ≫ S2700 Version -

Huawei ≫ S5700 Firmware Version v200r008c00

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r010c00

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r010c00spc300

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r011c00

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r011c00spc100

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r011c10

Huawei ≫ S5700 Version -

Huawei ≫ S5700 Firmware Version v200r011c10spc100

Huawei ≫ S5700 Version -

Huawei ≫ S6700 Firmware Version v200r008c00

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r010c00

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r010c00spc300

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r011c00

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r011c00spc100

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r011c10

Huawei ≫ S6700 Version -

Huawei ≫ S6700 Firmware Version v200r011c10spc100

Huawei ≫ S6700 Version -

Huawei ≫ S7700 Firmware Version v200r008c00

Huawei ≫ S7700 Version -

Huawei ≫ S7700 Firmware Version v200r010c00

Huawei ≫ S7700 Version -

Huawei ≫ S7700 Firmware Version v200r010c00spc300

Huawei ≫ S7700 Version -

Huawei ≫ S7700 Firmware Version v200r011c00

Huawei ≫ S7700 Version -

Huawei ≫ S7700 Firmware Version v200r011c00spc100

Huawei ≫ S7700 Version -

Huawei ≫ S7700 Firmware Version v200r011c10

Huawei ≫ S7700 Version -

Huawei ≫ S9700 Firmware Version v200r007c01

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r007c01b102

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r008c00

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r010c00

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r010c00spc300

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r011c00

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r011c00spc100

Huawei ≫ S9700 Version -

Huawei ≫ S9700 Firmware Version v200r011c10

Huawei ≫ S9700 Version -

Huawei ≫ Secospace Usg6300 Firmware Version v500r001c30

Huawei ≫ Secospace Usg6300 Version -

Huawei ≫ Secospace Usg6300 Firmware Version v500r001c60

Huawei ≫ Secospace Usg6300 Version -

Huawei ≫ Secospace Usg6500 Firmware Version v500r001c30

Huawei ≫ Secospace Usg6500 Version -

Huawei ≫ Secospace Usg6500 Firmware Version v500r001c60

Huawei ≫ Secospace Usg6500 Version -

Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30

Huawei ≫ Secospace Usg6600 Version -

Huawei ≫ Secospace Usg6600 Firmware Version v500r001c60

Huawei ≫ Secospace Usg6600 Version -

Huawei ≫ Usg9500 Firmware Version v500r001c30

Huawei ≫ Usg9500 Version -

Huawei ≫ Usg9500 Firmware Version v500r001c60

Huawei ≫ Usg9500 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.72%	0.488

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-22321

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-22321

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-22321

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-22321