CVE-2021-22342

mediumpriority · track · 20EPSS 0.006 · 47 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.56% (47th) EPSS

CVSS 4 · medium

Is it mine?

27 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-28

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

cvss

Technical severity, 0–10. One row per scoring source.

4.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04mediumAV:N/AC:L/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 1.2 · impact 3.6

v3.14.9mediumAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20US

affected products (27)

Products and version ranges known to be affected.

n/a IPS Module;NGFW Module;SeMG9811;USG9500≤ V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10,V500R005C20enisa_euvdEU
n/a IPS Module;NGFW Module;SeMG9811;USG9500≤ V500R005C00,V500R005C10,V500R005C20enisa_euvdEU
n/a IPS Module;NGFW Module;SeMG9811;USG9500≤ V500R005C00enisa_euvdEU
Huawei Technologies Co., Ltd. Huawei IPS Module≤ V500R005SPH008fstec_bduRU
Huawei Technologies Co., Ltd. Huawei IPS Module≤ V500R005C20SPC500fstec_bduRU
Huawei Technologies Co., Ltd. Huawei NGFW Module≤ V500R005SPH008fstec_bduRU
Huawei Technologies Co., Ltd. Huawei NGFW Module≤ V500R005C20SPC500fstec_bduRU
Huawei Technologies Co., Ltd. Huawei SeMG9811≤ V500R005SPH008fstec_bduRU
Huawei Technologies Co., Ltd. Huawei SeMG9811≤ V500R005C00SPC200fstec_bduRU
Huawei Technologies Co., Ltd. USG9500≤ V500R005SPH008fstec_bduRU
Huawei Technologies Co., Ltd. USG9500≤ V500R005C20SPC500fstec_bduRU
huawei ips module firmware= v500r005c00nvdUScpe:2.3:o:huawei:ips_module_firmware:*:*:*:*:*:*:*:*
huawei ips module firmware= v500r005c10nvdUScpe:2.3:o:huawei:ips_module_firmware:*:*:*:*:*:*:*:*
huawei ips module firmware= v500r005c20nvdUScpe:2.3:o:huawei:ips_module_firmware:*:*:*:*:*:*:*:*
huawei ngfw module firmware= v500r005c00nvdUScpe:2.3:o:huawei:ngfw_module_firmware:*:*:*:*:*:*:*:*
huawei ngfw module firmware= v500r005c10nvdUScpe:2.3:o:huawei:ngfw_module_firmware:*:*:*:*:*:*:*:*
huawei ngfw module firmware= v500r005c20nvdUScpe:2.3:o:huawei:ngfw_module_firmware:*:*:*:*:*:*:*:*
huawei semg9811 firmware= v500r005c00nvdUScpe:2.3:o:huawei:semg9811_firmware:*:*:*:*:*:*:*:*
huawei usg9500 firmware= v500r001c00nvdUScpe:2.3:o:huawei:usg9500_firmware:*:*:*:*:*:*:*:*
huawei usg9500 firmware= v500r001c20nvdUScpe:2.3:o:huawei:usg9500_firmware:*:*:*:*:*:*:*:*

showing 20 of 27

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2021-06-22modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan