CVE-2021-22321: Huawei NIP6300 Firmware

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Affected products

  • Huawei NIP6300 Firmware: version v500r001c30 only; version v500r001c60 only
  • Huawei NIP6600 Firmware: version v500r001c30 only
  • Huawei NIP6800 Firmware: version v500r001c60 only
  • Huawei s12700 Firmware: version v200r007c01 only; version v200r007c01b102 only; version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; …
  • Huawei s1700 Firmware: version v200r009c00spc200 only; version v200r009c00spc500 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; version v200r011c00spc100 only; …
  • Huawei s2700 Firmware: version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; version v200r011c00spc100 only; version v200r011c10 only
  • Huawei s5700 Firmware: version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; version v200r011c00spc100 only; version v200r011c10 only; …
  • Huawei s6700 Firmware: version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; version v200r011c00spc100 only; version v200r011c10 only; …
  • Huawei s7700 Firmware: version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; version v200r011c00spc100 only; version v200r011c10 only
  • Huawei s9700 Firmware: version v200r007c01 only; version v200r007c01b102 only; version v200r008c00 only; version v200r010c00 only; version v200r010c00spc300 only; version v200r011c00 only; …
  • Huawei Secospace USG6300 Firmware: version v500r001c30 only; version v500r001c60 only
  • Huawei Secospace USG6500 Firmware: version v500r001c30 only; version v500r001c60 only
  • Huawei Secospace USG6600 Firmware: version v500r001c30 only; version v500r001c60 only
  • Huawei USG9500 Firmware: version v500r001c30 only; version v500r001c60 only

Published 2021-03-22. Last modified 2026-06-17.