CVE-2021-22377: Command Injection
There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22377?
CVE-2021-22377 is a command injection vulnerability in Huawei S12700, S2700, S5700, S6700, and S7700. A module does not verify specific input sufficiently, allowing attackers to exploit this vulnerability.
What is the severity of CVE-2021-22377?
CVE-2021-22377 has a severity rating of 7.2 (High).
How can an attacker exploit CVE-2021-22377?
Attackers can exploit CVE-2021-22377 by sending malicious parameter input to the affected devices.
Which versions of the affected software are vulnerable to CVE-2021-22377?
The vulnerable versions of the affected software are: S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500, and S7700 V200R019C00SPC500.
How can I fix CVE-2021-22377?
To fix CVE-2021-22377, it is recommended to apply the patches provided by Huawei. Please refer to the official Huawei security advisory for more information.