VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 22, 2021· Updated Jun 17, 2026

CVE-2021-22309

CVE-2021-22309

Description

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions V500R001C30SPC200, V500R001C60SPC500,V500R005C00SPC200;USG9520 versions V500R005C00;USG9560 versions V500R005C00;USG9580 versions V500R005C00.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Huawei/Usg9500 Firmware3 versions
    cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc200:*:*:*:*:*:*:*
  • Huawei/Usg9580 Firmware2 versions
    cpe:2.3:o:huawei:usg9520_firmware:v500r005c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:usg9520_firmware:v500r005c00:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:usg9580_firmware:v500r005c00:*:*:*:*:*:*:*
  • Huawei/Usg9560 Firmware
    cpe:2.3:o:huawei:usg9560_firmware:v500r005c00:*:*:*:*:*:*:*
  • Huawei/USG9500, USG9520, USG9560 and USG9580description
  • Huawei/USG9500llm-fuzzy
    Range: V500R001C30SPC200, V500R001C60SPC500, V500R005C00SPC200
  • Huawei/USG9520llm-fuzzy
    Range: V500R005C00
  • Huawei/USG9560llm-fuzzy
    Range: V500R005C00
  • Huawei/USG9580llm-fuzzy
    Range: V500R005C00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.