Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious ope...

CVE-2021-22321 · published 5 years ago
Summary

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include so...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei nip6300_firmware v500r001c30
v500r001c60
cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*
huawei nip6600_firmware v500r001c30
cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*
huawei nip6800_firmware v500r001c60
cpe:2.3:o:huawei:nip6800_firmware:v500r001c60:*:*:*:*:*:*:*
huawei s12700_firmware v200r007c01
v200r007c01b102
v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*
huawei s1700_firmware v200r009c00spc200
v200r009c00spc500
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
cpe:2.3:o:huawei:s1700_firmware:v200r009c00spc200:*:*:*:*:*:*:*
huawei s2700_firmware v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*
huawei s5700_firmware v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
v200r011c10spc100
cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*
huawei s6700_firmware v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
v200r011c10spc100
cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*
huawei s7700_firmware v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*
huawei s9700_firmware v200r007c01
v200r007c01b102
v200r008c00
v200r010c00
v200r010c00spc300
v200r011c00
v200r011c00spc100
v200r011c10
cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*
huawei secospace_usg6300_firmware v500r001c30
v500r001c60
cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*
huawei secospace_usg6500_firmware v500r001c30
v500r001c60
cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*
huawei secospace_usg6600_firmware v500r001c30
v500r001c60
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*
huawei usg9500_firmware v500r001c30
v500r001c60
cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*
Original advisory text
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious ope...
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published22 Mar 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-22321 · NVD
Track software like this
Free during beta