CVE-2021-22342: Huawei Ips Module Firmware

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

Affected products

  • Huawei Ips Module Firmware: version v500r005c00 only; version v500r005c10 only; version v500r005c20 only
  • Huawei Ngfw Module Firmware: version v500r005c00 only; version v500r005c10 only; version v500r005c20 only
  • Huawei SEMG9811 Firmware: version v500r005c00 only
  • Huawei USG9500 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …

Published 2021-06-22. Last modified 2026-06-17.