CVE-2021-22312

Description

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.186

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-22312 ,CVE-2021-22320 are affected in ips_module_firmware v500r005c00spc200	NCM
Vulnerabilities CVE-2021-22312 ,CVE-2021-22320 are affected in ips_module_firmware v500r005c00spc100	NCM
Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-22312)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234