CVE-2021-22360 Denial of service in USG9500
An authenticated attacker can cause service abnormalities on Huawei USG9500 devices through improper resource management.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22360?
CVE-2021-22360 is a medium-severity denial of service vulnerability in Huawei Usg9500 Firmware, published on 27 May 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices.
Weakness: CWE-770
Which versions are affected by CVE-2021-22360?
It affects 1 product.
Products include Huawei Usg9500 Firmware.
How do I fix CVE-2021-22360?
No fix has been published for CVE-2021-22360 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-22360 being exploited?
There is no known exploitation of CVE-2021-22360 in the wild and no public exploit code.
Other vulnerabilities in Huawei Usg9500 Firmware
Sources
Also known as GHSA-2p54-cq77-wrjr.