VulnerabilityModified

CVE-2021-22310

There is an information leakage vulnerability in some huawei products.

MEDIUM 4.4EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.

CVSS 3.1: 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.19% probability · 8th percentile
CISA KEV: Not listed
Weakness: CWE-532
Affected: huawei/nip6300 firmware · huawei/nip6600 firmware · huawei/secospace usg6300 firmware · huawei/secospace usg6500 firmware · huawei/secospace usg6600 firmware · huawei/usg9500 firmware
Source: psirt@huawei.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.