{ "data_type": "CVE", "data_format": "MITRE", "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2021-22342", "ASSIGNER": "psirt@huawei.com", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "n/a", "product": { "product_data": [ { "product_name": "IPS Module;NGFW Module;SeMG9811;USG9500", "version": { "version_data": [ { "version_value": "V500R005C00,V500R005C10,V500R005C20" }, { "version_value": "V500R005C00,V500R005C10,V500R005C20" }, { "version_value": "V500R005C00" }, { "version_value": "V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10,V500R005C20" } ] } } ] } } ] } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Information Leak" } ] } ] }, "references": { "reference_data": [ { "refsource": "MISC", "name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-infomationleak-en", "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-infomationleak-en" } ] }, "description": { "description_data": [ { "lang": "eng", "value": "There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20." } ] } }