CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.

• CWE-787

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-02-outofbounds-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-02-outofbounds-enVendor Advisory

Published

May 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22405There is a Configuration defects in Huawei Smartphone.Succes…7.5
• CVE-2021-22406There is an Uncaught Exception vulnerability in Huawei Smart…7.5
• CVE-2021-22407There is a Configuration defects in Huawei Smartphone.Succes…5.3
• CVE-2021-22409There is a denial of service vulnerability in some versions …5.3
• CVE-2021-2241Vulnerability in the Oracle iStore product of Oracle E-Busin…8.1
• CVE-2021-22410There is a XSS injection vulnerability in iMaster NCE-Fabric…5.4
• CVE-2021-22412There is an Integer Overflow Vulnerability in Huawei Smartph…7.5
• CVE-2021-22413There is an Integer Overflow Vulnerability in Huawei Smartph…7.5
• CVE-2021-22414There is a Memory Buffer Errors Vulnerability in Huawei Smar…7.5
• CVE-2021-22415There is an Incorrect Calculation of Buffer Size Vulnerabili…7.5
• CVE-2021-22416A component of the HarmonyOS has a Data Processing Errors vu…7.8
• CVE-2021-22417A component of the HarmonyOS has a Data Processing Errors vu…5.5