What’s Vulnerable › Vulnerabilities
CVE-2021-22321
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-03-22 · updated 2026-06-17
- Weakness: CWE-416
Description
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
Affected products
- Huawei Nip6300 Firmware: v500r001c30, v500r001c60
- Huawei Nip6600 Firmware: v500r001c30
- Huawei Nip6800 Firmware: v500r001c60
- Huawei S12700 Firmware: v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00 (+2)
- Huawei S1700 Firmware: v200r009c00spc200, v200r009c00spc500, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100 (+1)
- Huawei S2700 Firmware: v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
- Huawei S5700 Firmware: v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 (+1)
- Huawei S6700 Firmware: v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10 (+1)
- Huawei S7700 Firmware: v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00, v200r011c00spc100, v200r011c10
- Huawei S9700 Firmware: v200r007c01, v200r007c01b102, v200r008c00, v200r010c00, v200r010c00spc300, v200r011c00 (+2)
- Huawei Secospace Usg6300 Firmware: v500r001c30, v500r001c60
- Huawei Secospace Usg6500 Firmware: v500r001c30, v500r001c60
- Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c30, v500r001c60
- Huawei USG9500: v500r001c30, v500r001c60
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en
Get alerted when CVE-2021-22321 or the next vulnerability affects your stack