FKIE_CVE-2021-22320

Vulnerability from fkie_nvd - Published: 2021-03-22 19:15 - Updated: 2024-11-21 05:49
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.
References
psirt@huawei.comhttps://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-enVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-enVendor Advisory
Impacted products
Vendor Product Version
huawei ips_module_firmware v500r005c00spc100
huawei ips_module_firmware v500r005c00spc200
huawei ips_module_firmware v500r005c20spc300
huawei ips_module -
huawei ngfw_module_firmware v500r005c00spc100
huawei ngfw_module_firmware v500r005c00spc200
huawei ngfw_module_firmware v500r005c20spc300
huawei ngfw_module -
huawei nip6600_firmware v500r001c30spc200
huawei nip6600_firmware v500r001c30spc600
huawei nip6600_firmware v500r001c60spc500
huawei nip6600_firmware v500r005c00spc100
huawei nip6600_firmware v500r005c00spc200
huawei nip6600_firmware v500r005c20spc300
huawei nip6600_firmware v500r005c20spc500
huawei nip6600 -
huawei nip6800_firmware v500r001c60spc500
huawei nip6800_firmware v500r005c00spc100
huawei nip6800_firmware v500r005c00spc200
huawei nip6800_firmware v500r005c20spc300
huawei nip6800_firmware v500r005c20spc500
huawei nip6800 -
huawei secospace_usg6300_firmware v500r001c30spc200
huawei secospace_usg6300_firmware v500r001c30spc600
huawei secospace_usg6300_firmware v500r001c60spc500
huawei secospace_usg6300_firmware v500r005c00spc100
huawei secospace_usg6300_firmware v500r005c00spc200
huawei secospace_usg6300_firmware v500r005c20spc300
huawei secospace_usg6300_firmware v500r005c20spc500
huawei secospace_usg6300 -
huawei secospace_usg6500_firmware v500r001c30spc200
huawei secospace_usg6500_firmware v500r001c30spc600
huawei secospace_usg6500_firmware v500r001c60spc500
huawei secospace_usg6500_firmware v500r005c00spc100
huawei secospace_usg6500_firmware v500r005c00spc200
huawei secospace_usg6500_firmware v500r005c20spc300
huawei secospace_usg6500_firmware v500r005c20spc500
huawei secospace_usg6500 -
huawei secospace_usg6600_firmware v500r001c30spc200
huawei secospace_usg6600_firmware v500r001c30spc600
huawei secospace_usg6600_firmware v500r001c60spc500
huawei secospace_usg6600_firmware v500r005c00spc100
huawei secospace_usg6600_firmware v500r005c00spc200
huawei secospace_usg6600_firmware v500r005c20spc300
huawei secospace_usg6600_firmware v500r005c20spc500
huawei secospace_usg6600 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D4E285D-09FB-4123-B46A-E27818ADFFDD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5A659FF-6019-48F8-BF60-D9FC79682435",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:ips_module_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "E85558D2-1D72-4C8C-AD9B-A491EFE8C878",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AA59256-7429-4D82-85FE-229EB033BDA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "E728C122-5732-48FF-910C-3241EABA3DE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "99B5545E-59AB-4992-87F5-92D3E5DF6D1D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9FE889E-58A9-4D93-8054-7B845C44BDA1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC2F5B2E-5233-4B9F-BA85-0D369C1A8805",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "73B19CF4-92DF-4BB5-B9C7-76901EC5673C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC26B79E-CBCD-4D93-A552-1A20B155F0FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "46A3FD77-200C-40D7-A31E-6D964F9A375E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "64E57920-13A9-4C42-A2FA-13C72565C6A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6600_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BC83416-759F-4121-BEF4-82E14A958A31",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE8CA649-7AE1-497C-869B-B4DD315F342C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "C38F1E7A-0347-4E45-A0B6-CB8CE0D8A07E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "954A1F94-2442-4064-9DC5-14EFC2FA62F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDFB70C7-8E9A-4538-A4FF-6FA820D895CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "E05A897A-B155-4872-B52C-90F1B396E933",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:nip6800_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF51C8C6-2B00-4FA1-9476-B5404150C1F2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "875441DD-575F-4F4D-A6BD-23C38641D330",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D8E3300-4E1E-433A-87D9-983F9C1CE2B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D2F8A0A-AA2F-4144-923A-4B461B1A3E99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "26CBEDA1-F057-489F-9255-C178272208CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EA34227-DB8B-48DF-8150-5C6815B49FA6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "322A0123-38E6-4D84-97F1-15F983DC3725",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "26F1F0EC-4DF0-4857-8A8C-73E1DF0B60C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "F28D0C32-5F80-4A19-B352-B6CA2FBEACF5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C281B511-7A27-4FC6-9427-AE5AD7C302F3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FA2444C-EE5E-4DFC-A9F8-4744059EF7DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
              "matchCriteriaId": "203B31A8-8C5C-42E8-8D4F-861F90FC16FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF816E5F-2082-4460-ABF9-93726C5879A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5DF54A7-6E29-4BB5-81FC-5EE75D892D12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0DA1F00-D38C-40AF-A14D-D5EE0B0A3751",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "30EBF74D-ECC2-49B9-9D71-DA140671688D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DA0DA4D-C41D-464F-A202-D794C476DDA9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
              "matchCriteriaId": "B80E521E-1BFB-405E-9F8E-4A0734731FD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "5226BD96-2B00-469B-AADD-CD0541610BBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DB3FD6B-0EE4-4467-8BAE-AE52FB2906EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BE67E91-7805-4CAA-89EE-9226CFBD731B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
              "matchCriteriaId": "5096CD20-E345-4C59-AB98-EEF92C9878C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3ED8964-355A-4548-9D74-9BD624FE47D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE469876-F873-4705-9760-097AE840A818",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de denegaci\u00f3n de servicio en los productos Huawei.\u0026#xa0;Un m\u00f3dulo no puede tratar correctamente mensajes espec\u00edficos.\u0026#xa0;Unos atacantes pueden explotar esta vulnerabilidad mediante el env\u00edo de mensajes maliciosos a un m\u00f3dulo afectado.\u0026#xa0;Esto puede conllevar a una denegaci\u00f3n de servicio.\u0026#xa0;Los productos afectados incluyen algunas versiones de IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 y Secospace USG6600"
    }
  ],
  "id": "CVE-2021-22320",
  "lastModified": "2024-11-21T05:49:54.300",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-03-22T19:15:11.897",
  "references": [
    {
      "source": "psirt@huawei.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.