6.5
CVE-2021-22411
- EPSS 0.17%
- Published 27.05.2021 13:15:08
- Last modified 21.11.2024 05:50:04
- Source psirt@huawei.com
- Teams watchlist Login
- Open Login
There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Ngfw Module Firmware Versionv500r005c00spc100
Huawei ≫ Ngfw Module Firmware Versionv500r005c00spc200
Huawei ≫ Secospace Usg6300 Firmware Versionv500r001c30spc200
Huawei ≫ Secospace Usg6300 Firmware Versionv500r001c30spc600
Huawei ≫ Secospace Usg6300 Firmware Versionv500r001c60spc500
Huawei ≫ Secospace Usg6300 Firmware Versionv500r005c00spc100
Huawei ≫ Secospace Usg6300 Firmware Versionv500r005c00spc200
Huawei ≫ Secospace Usg6500 Firmware Versionv500r001c30spc200
Huawei ≫ Secospace Usg6500 Firmware Versionv500r001c30spc600
Huawei ≫ Secospace Usg6500 Firmware Versionv500r001c60spc500
Huawei ≫ Secospace Usg6500 Firmware Versionv500r005c00spc100
Huawei ≫ Secospace Usg6500 Firmware Versionv500r005c00spc200
Huawei ≫ Secospace Usg6600 Firmware Versionv500r001c30spc200
Huawei ≫ Secospace Usg6600 Firmware Versionv500r001c30spc600
Huawei ≫ Secospace Usg6600 Firmware Versionv500r001c60spc500
Huawei ≫ Secospace Usg6600 Firmware Versionv500r005c00spc100
Huawei ≫ Secospace Usg6600 Firmware Versionv500r005c00spc200
Huawei ≫ Usg9500 Firmware Versionv500r001c60spc500
Huawei ≫ Usg9500 Firmware Versionv500r005c00spc100
Huawei ≫ Usg9500 Firmware Versionv500r005c00spc200
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.17% | 0.355 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.