CVE-2021-22309

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions V500R001C30SPC200, V500R001C60SPC500,V500R005C00SPC200;USG9520 versions V500R005C00;USG9560 versions V500R005C00;USG9580 versions V500R005C00.

• CWE-330

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-enVendor Advisory

Published

Mar 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22303There is a pointer double free vulnerability in Taurus-AL00A…3.3
• CVE-2021-22304There is a use after free vulnerability in Taurus-AL00A 10.0…3.3
• CVE-2021-22305There is a buffer overflow vulnerability in Mate 30 10.1.0.1…3.3
• CVE-2021-22306There is an out-of-bound read vulnerability in Mate 30 10.0.…4.6
• CVE-2021-22307There is a weak algorithm vulnerability in Mate 3010.0.0.203…5.5
• CVE-2021-22308There is a Business Logic Errors vulnerability in Huawei Sma…3.3
• CVE-2021-2231Vulnerability in the Oracle Installed Base product of Oracle…8.1
• CVE-2021-22310There is an information leakage vulnerability in some huawei…4.4
• CVE-2021-22311There is an improper permission assignment vulnerability in …7.2
• CVE-2021-22312There is a memory leak vulnerability in some Huawei products…6.5
• CVE-2021-22313There is a Security Function vulnerability in Huawei Smartph…7.5
• CVE-2021-22314There is a local privilege escalation vulnerability in some …7.8