CVE:CVE-2021-22356
CNNVD:CNNVD-202105-2094
Huawei USG9500等都是中国华为（Huawei）公司的产品。USG9500是一款数据中心防火墙产品。Huawei IPS Module是一款入侵防御系统（IPS）模块。NGFW Module是一款下一代防火墙（NGFW）模块。
多款华为产品中存在加密问题漏洞，该漏洞源于产品在设备间获取和分析数据包时采用了弱安全加密算法。攻击者可通过该漏洞导致信息泄露。以下产品和版本受到影响：NGFW Module,Huawei IPS Module,Huawei Secospace USG6300,Huawei Secospace USG6500,Huawei Secospace USG6600,USG9500。
solution:Upgrade huawei ips_module_firmware to a higher version than v500r005c00spc100,v500r005c00spc200,and avoid the version v500r005c00spc100,v500r005c00spc200; Upgrade huawei ngfw_module_firmware to a higher version than v500r005c00spc100,v500r005c00spc200,and avoid the version v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6300_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6500_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6600_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei usg9500_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200