CVE-2021-22312
Estado: ModificadaMedia (6.5)—
There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.83%
- Percentil entre todas las CVEs puntuadas: 56
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (12)
Huawei — Ips6000e FirmwareHuawei — IPS Module FirmwareHuawei — Ngfw Module FirmwareHuawei — Nip6000e FirmwareHuawei — Nip6300 FirmwareHuawei — Nip6600 FirmwareHuawei — Nip6800 FirmwareHuawei — Secospace Usg6300 FirmwareHuawei — Secospace Usg6500 FirmwareHuawei — Secospace Usg6600 FirmwareHuawei — Usg6000e FirmwareHuawei — Usg9500 Firmware
CWE
- CWE-401
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-22312",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "n/a",
"product": "IPS Module;NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500",
"versions": [
{
"status": "affected",
"version": "V500R005C00SPC100,V500R005C00SPC200"
},
{
"status": "affected",
"version": "V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200"
}
]
}
]
}
],
"published": "2021-04-08T19:15:12.727",
"references": [
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500."
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad filtrado de memoria en algunos productos de Huawei. Un atacante remoto autenticado puede explotar esta vulnerabilidad mediante el envío de un mensaje específico al producto afectado. Debido a que no se libera la memoria asignada apropiadamente, una explotación con éxito puede causar que el servicio sea anormal. Los productos afectados incluyen algunas versiones de IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 y USG9500"
}
],
"lastModified": "2026-06-17T03:36:58.923",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D4E285D-09FB-4123-B46A-E27818ADFFDD"
},
{
"criteria": "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5A659FF-6019-48F8-BF60-D9FC79682435"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AA59256-7429-4D82-85FE-229EB033BDA8"
},
{
"criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E728C122-5732-48FF-910C-3241EABA3DE6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D8E3300-4E1E-433A-87D9-983F9C1CE2B7"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D2F8A0A-AA2F-4144-923A-4B461B1A3E99"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26CBEDA1-F057-489F-9255-C178272208CA"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EA34227-DB8B-48DF-8150-5C6815B49FA6"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "322A0123-38E6-4D84-97F1-15F983DC3725"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FA2444C-EE5E-4DFC-A9F8-4744059EF7DC"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "203B31A8-8C5C-42E8-8D4F-861F90FC16FE"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF816E5F-2082-4460-ABF9-93726C5879A6"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5DF54A7-6E29-4BB5-81FC-5EE75D892D12"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0DA1F00-D38C-40AF-A14D-D5EE0B0A3751"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B80E521E-1BFB-405E-9F8E-4A0734731FD0"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5226BD96-2B00-469B-AADD-CD0541610BBD"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DB3FD6B-0EE4-4467-8BAE-AE52FB2906EA"
},
{
"criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BE67E91-7805-4CAA-89EE-9226CFBD731B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BE469876-F873-4705-9760-097AE840A818"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0BF5257-8CD1-4951-9C53-07B85D468F8B"
},
{
"criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E2CDEF7-F8C8-482E-B43D-DB3F0CE010F8"
},
{
"criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A1EFB9D-5349-4EAF-9880-34F0D20011E4"
},
{
"criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE7369E3-5F3F-40D1-8690-95192131B683"
},
{
"criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADA71C5D-4B11-401D-AEC9-907204C21476"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42C2CAD1-543D-47E2-9B12-6B2E8538C8DC"
},
{
"criteria": "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29134400-23E7-4888-B027-A29167E95693"
},
{
"criteria": "cpe:2.3:o:huawei:nip6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CE35922-612B-437B-8044-56FA301E73C4"
},
{
"criteria": "cpe:2.3:o:huawei:nip6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "848014B8-8D79-48C3-8ED2-EA98378428F6"
},
{
"criteria": "cpe:2.3:o:huawei:nip6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E86EACC-53A8-4216-80D4-BD1BB215E151"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5E054182-CE33-45E3-8595-159A75BA5162"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9FE889E-58A9-4D93-8054-7B845C44BDA1"
},
{
"criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC2F5B2E-5233-4B9F-BA85-0D369C1A8805"
},
{
"criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73B19CF4-92DF-4BB5-B9C7-76901EC5673C"
},
{
"criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC26B79E-CBCD-4D93-A552-1A20B155F0FE"
},
{
"criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46A3FD77-200C-40D7-A31E-6D964F9A375E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CE8CA649-7AE1-497C-869B-B4DD315F342C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "024AA4AA-8A09-4E0B-81A0-76E2960A15FE"
},
{
"criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FB28A28-8766-4A28-B438-117944ABD294"
},
{
"criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C38F1E7A-0347-4E45-A0B6-CB8CE0D8A07E"
},
{
"criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "954A1F94-2442-4064-9DC5-14EFC2FA62F7"
},
{
"criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDFB70C7-8E9A-4538-A4FF-6FA820D895CA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "875441DD-575F-4F4D-A6BD-23C38641D330"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:usg6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "261DD2F0-5503-4939-9761-DA1219DD5633"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:usg6000e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "821F3BBF-CFD5-41E5-9D30-9FEBA1EE4429"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:nip6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F666919C-2378-4D61-AF77-428F689E8071"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:nip6000e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B7F76C1B-1214-4A55-926C-AB0AF7333481"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ips6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0D1B96D-834B-4B64-B026-AB2F156C8A67"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ips6000e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "609D868B-E091-49BD-A632-54DB6BBC9092"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@huawei.com"
}