CVE-2021-22310 - CVE House
Back to Database
Status published Medium CVE-2021-22310

There is an information leakage vulnerability in some huawei products....

Vulnerability Description

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22310

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Vulnerable Versions:
V500R001C00,V500R001C20,V500R001C30, V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80, V500R005C00,V500R005C10

Timeline

Official Publish: March 22nd, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.