CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions include: IPS Module V500R005C00SPC100, V500R005C00SPC200; NGFW Module V500R005C00SPC100, V500R005C00SPC200; Secospace USG6300 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; Secospace USG6500 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; Secospace USG6600 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200; USG9500 V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200.

• CWE-327

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210512-01-infomationleak-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210512-01-infomationleak-enVendor Advisory

Published

Nov 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-2235Vulnerability in the Oracle Transportation Execution product…8.1
• CVE-2021-22350There is a Memory Buffer Improper Operation Limit Vulnerabil…7.5
• CVE-2021-22351There is a Credentials Management Errors Vulnerability in Hu…8.1
• CVE-2021-22352There is a Configuration Defect Vulnerability in Huawei Smar…7.8
• CVE-2021-22353There is a Memory Buffer Improper Operation Limit Vulnerabil…7.5
• CVE-2021-22354There is an Information Disclosure Vulnerability in Huawei S…9.1
• CVE-2021-22357There is a denial of service vulnerability in Huawei product…7.5
• CVE-2021-22358There is an insufficient input validation vulnerability in F…4.3
• CVE-2021-22359There is a denial of service vulnerability in the verisions …7.5
• CVE-2021-2236Vulnerability in the Oracle Financials Common Modules produc…8.1
• CVE-2021-22360There is a resource management error vulnerability in the ve…4.9
• CVE-2021-22361There is an improper authorization vulnerability in eCNS280 …7.8