What’s Vulnerable › Vulnerabilities

CVE-2021-22342

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-22 · updated 2026-06-17

Description

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

Affected products

• Huawei Ips Module Firmware: v500r005c00, v500r005c10, v500r005c20
• Huawei Ngfw Module Firmware: v500r005c00, v500r005c10, v500r005c20
• Huawei Semg9811 Firmware: v500r005c00
• Huawei USG9500: v500r001c00, v500r001c20, v500r001c30, v500r001c50, v500r001c60, v500r001c80 (+3)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-infomationleak-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-infomationleak-en

Get alerted when CVE-2021-22342 or the next vulnerability affects your stack