CVE-2021-22312 describes a memory leak vulnerability in various Huawei products, including specific versions of their IPS, NGFW, Secospace USG6300, USG6500, USG6600, and USG9500 modules. An authenticated remote attacker can trigger this flaw by sending specially crafted messages, leading to improper memory deallocation and potential service disruption. Rated as Medium severity (CVSS 6.5), this vulnerability requires authentication but has low attack complexity and can result in high availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v500r005c00spc100CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100:*:*:*:*:*:*:* | ||
v500r005c00spc200CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200:*:*:*:*:*:*:* | ||
v500r005c00spc100CPE matchmatch criteria | cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:* | ||
v500r005c00spc200CPE matchmatch criteria | cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:* | ||
v500r001c30spc200CPE matchmatch criteria | cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.