CVE:CVE-2021-22411
CNNVD:CNNVD-202105-485
Huawei NGFW Module是中国华为（Huawei）公司的一款下一代防火墙（NGFW）模块。
Huawei NGFW 存在缓冲区错误漏洞。经过身份验证的远程攻击者可以触发内存损坏并导致目标系统上的服务拒绝状况。以下产品和版本受到影响：NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
solution:Upgrade huawei ngfw_module_firmware to a higher version than v500r005c00spc100,v500r005c00spc200,and avoid the version v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6300_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6500_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei secospace_usg6600_firmware to a higher version than v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c30spc200,v500r001c30spc600,v500r001c60spc500,v500r005c00spc100,v500r005c00spc200; Upgrade huawei usg9500_firmware to a higher version than v500r001c60spc500,v500r005c00spc100,v500r005c00spc200,and avoid the version v500r001c60spc500,v500r005c00spc100,v500r005c00spc200