Memory leak in Huawei products - CVE-2021-22341

Vulnerability identifier: #VU53424

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-22341

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform DoS attack on the target system.

The vulnerability exists due memory leak. A remote administrator can force the application to leak memory and perform denial of service attack.

Huawei IPS Module
Huawei NIP6300
Huawei NIP6600
Huawei NGFW Module
Huawei Secospace USG6300
Huawei Secospace USG6500
Huawei Secospace USG6600

Install updates from vendor's website.

Huawei IPS Module - update to V500R005C20SPC500
Huawei NGFW Module - update to V500R005C20SPC500
Huawei NIP6300 - update to V500R005C20SPC500
Huawei NIP6600 - update to V500R005C20SPC500
Huawei Secospace USG6300 - update to V500R005C20SPC500
Huawei Secospace USG6500 - update to V500R005C20SPC500
Huawei Secospace USG6600 - update to V500R005C20SPC500

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-memleak-en

• Denial of service in sevral Huawei Products