Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-22342

No fix known EPSS <1%

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

Published 2021-06-22 · CVE record · OSV

Products: huawei ips_module_firmware, huawei ngfw_module_firmware, huawei semg9811_firmware, huawei usg9500_firmware