CVE-2021-22320

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Mar 22, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-223215.3There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers c CVE-2021-223227.5There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma CVE-2021-223239.8There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permissio CVE-2021-223247.5There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data c CVE-2021-223255.3There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video str CVE-2021-223267.1A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this vulnerability to obt CVE-2021-223276.5There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the i CVE-2021-223287.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an a CVE-2021-223294.9There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations t CVE-2021-22338.1Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). Supported versions that are a CVE-2021-223306.5There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An CVE-2021-223317.5There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers ca