HIGH🇬🇧 English

CVE-2021-22377

CVSS 7.2v3.1pub. 2021-06-22upd. 2024-11-21

There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Huawei S12700

    HW
    Huawei
    wszystkie wersje

  • Huawei S12700 Firmware

    OS
    Huawei
    v200r019c00spc500

  • Huawei S2700

    HW
    Huawei
    wszystkie wersje

  • Huawei S2700 Firmware

    OS
    Huawei
    v200r019c00spc500

  • Huawei S5700

    HW
    Huawei
    wszystkie wersje

  • Huawei S5700 Firmware

    OS
    Huawei
    v200r019c00spc500

  • Huawei S6700

    HW
    Huawei
    wszystkie wersje

  • Huawei S6700 Firmware

    OS
    Huawei
    v200r019c00spc500

  • Huawei S7700

    HW
    Huawei
    wszystkie wersje

  • Huawei S7700 Firmware

    OS
    Huawei
    v200r019c00spc500
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-37129HIGH7.5ten sam produkt

There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a functi...

CVE-2021-22357HIGH7.5ten sam produkt

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due...

CVE-2021-22359HIGH7.5ten sam produkt

There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 o...

CVE-2019-5304HIGH7.5ten sam produkt

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specifi...

CVE-2019-19397HIGH7.5ten sam produkt

There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by ...