Vulnerability Intelligence Report

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

No Active Exploit Signals

CVSS Base Score

5.3

MEDIUM

EPSS Probability:0.71%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

Affected Products & Versions

Vendor	Product	Affected Versions
huawei	nip6300_firmware	v500r001c30, v500r001c60
huawei	nip6300	all
huawei	nip6600_firmware	v500r001c30
huawei	nip6600	all
huawei	nip6800_firmware	v500r001c60
huawei	nip6800	all
huawei	s12700_firmware	v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
huawei	s12700	all
huawei	s1700_firmware	v200r009c00spc200, v200r009c00spc500, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
huawei	s1700	all
huawei	s2700_firmware	v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
huawei	s2700	all
huawei	s5700_firmware	v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10, v200r011c10spc100
huawei	s5700	all
huawei	s6700_firmware	v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10, v200r011c10spc100
huawei	s6700	all
huawei	s7700_firmware	v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
huawei	s7700	all
huawei	s9700_firmware	v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
huawei	s9700	all
huawei	secospace_usg6300_firmware	v500r001c30, v500r001c60
huawei	secospace_usg6300	all
huawei	secospace_usg6500_firmware	v500r001c30, v500r001c60
huawei	secospace_usg6500	all
huawei	secospace_usg6600_firmware	v500r001c30, v500r001c60
huawei	secospace_usg6600	all
huawei	usg9500_firmware	v500r001c30, v500r001c60
huawei	usg9500	all

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗

No reference links found.

Threat Intelligence Signals

EPSS Score

0.715%

GitHub Advisory

GHSA-p3qf-gvrh-m63f ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	Huawei Technologies · Vendor · China
Reserved	2021-01-05T00:00:00
Published	2021-03-22T19:03:52
Last Updated	2024-08-03T18:37:18

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2021-22321

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2021-22321

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE