CVE-2021-22341

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NIP6300 versions V500R005C00SPC100 through V500R005C10SPC200 Huawei NIP6600 versions V500R005C00SPC100 through V500R005C00SPC200 Huawei Secospace USG6300 versions V500R005C00SPC100 through V500R005C00SPC200 Huawei Secospace USG6500 versions V500R005C00SPC100 through V500R005C10SPC200 Huawei Secospace USG6600 versions V500R005C00SPC100 through V500R005C00SPC200

Description A memory leak vulnerability exists in Huawei products due to a resource management weakness in a module. Attackers with high privilege can exploit this vulnerability by performing some operations, leading to a memory leak. This can cause a denial of service.

Recommendations For Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei NIP6300 versions V500R005C00SPC100 through V500R005C10SPC200, update to a fixed version. For Huawei NIP6600 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei Secospace USG6300 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. For Huawei Secospace USG6500 versions V500R005C00SPC100 through V500R005C10SPC200, update to a fixed version. For Huawei Secospace USG6600 versions V500R005C00SPC100 through V500R005C00SPC200, update to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.