CVE-2021-22312: Huawei IPS6000E Firmware

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Affected products

  • Huawei IPS6000E Firmware: version v600r006c00 only
  • Huawei Ips Module Firmware: version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei Ngfw Module Firmware: version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei NIP6000E Firmware: version v600r006c00 only
  • Huawei NIP6300 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei NIP6600 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei NIP6800 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei Secospace USG6300 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei Secospace USG6500 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei Secospace USG6600 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only
  • Huawei USG6000E Firmware: version v600r006c00 only
  • Huawei USG9500 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only

Published 2021-04-08. Last modified 2026-06-17.