CVE-2021-22320: Huawei Ips Module Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.

Affected products

• Huawei Ips Module Firmware: version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only
• Huawei Ngfw Module Firmware: version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only
• Huawei NIP6600 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only; …
• Huawei NIP6800 Firmware: version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only; version v500r005c20spc500 only
• Huawei Secospace USG6300 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only; …
• Huawei Secospace USG6500 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only; …
• Huawei Secospace USG6600 Firmware: version v500r001c30spc200 only; version v500r001c30spc600 only; version v500r001c60spc500 only; version v500r005c00spc100 only; version v500r005c00spc200 only; version v500r005c20spc300 only; …

Published 2021-03-22. Last modified 2026-06-17.