CVE-2021-22411

Published May 27, 2021

Last updated 3 years ago

Overview

Description: There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
Source: psirt@huawei.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3AA59256-7429-4D82-85FE-229EB033BDA8"
          },
          {
            "criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E728C122-5732-48FF-910C-3241EABA3DE6"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3D8E3300-4E1E-433A-87D9-983F9C1CE2B7"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D2F8A0A-AA2F-4144-923A-4B461B1A3E99"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26CBEDA1-F057-489F-9255-C178272208CA"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9EA34227-DB8B-48DF-8150-5C6815B49FA6"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "322A0123-38E6-4D84-97F1-15F983DC3725"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2FA2444C-EE5E-4DFC-A9F8-4744059EF7DC"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "203B31A8-8C5C-42E8-8D4F-861F90FC16FE"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF816E5F-2082-4460-ABF9-93726C5879A6"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F5DF54A7-6E29-4BB5-81FC-5EE75D892D12"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0DA1F00-D38C-40AF-A14D-D5EE0B0A3751"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B80E521E-1BFB-405E-9F8E-4A0734731FD0"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5226BD96-2B00-469B-AADD-CD0541610BBD"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4DB3FD6B-0EE4-4467-8BAE-AE52FB2906EA"
          },
          {
            "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BE67E91-7805-4CAA-89EE-9226CFBD731B"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "BE469876-F873-4705-9760-097AE840A818"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8A1EFB9D-5349-4EAF-9880-34F0D20011E4"
          },
          {
            "criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE7369E3-5F3F-40D1-8690-95192131B683"
          },
          {
            "criteria": "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ADA71C5D-4B11-401D-AEC9-907204C21476"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References