Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-22310

No fix known EPSS <1%

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.

Published 2021-03-22 · CVE record · OSV

Products: huawei nip6300_firmware, huawei nip6600_firmware, huawei secospace_usg6300_firmware, huawei secospace_usg6500_firmware, huawei secospace_usg6600_firmware, huawei usg9500_firmware