CVE-2021-33658: High severity huawei atune vulnerability
Published Mar 11, 2022
·Updated
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.
Affected Software
8 affected components
Huawei Atune>=0.3<=0.8
Huawei Openeuler=20.03-sp1
Huawei Openeuler=20.03-sp2
Huawei Openeuler=20.03-sp3
All of the following
Huawei Atune>=0.3<=0.8
Any of the following
Openatom Openeuler=20.03-sp1
Openatom Openeuler=20.03-sp2
Openatom Openeuler=20.03-sp3
Event History
Mar 11, 2022
CVE Published
via MITRE·05:54 PM
Data Sourced
via MITRE·05:54 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-33658?
CVE-2021-33658 is a vulnerability in atune before version 0.3-0.8 that allows local users to escalate privileges or modify files.
2
How do I exploit CVE-2021-33658?
To exploit CVE-2021-33658, log in as a local user and run the curl command to access the local atune URL interface.
3
Is authentication forcibly enabled in the default configuration of atune before version 0.3-0.8?
No, authentication is not forcibly enabled in the default configuration of atune before version 0.3-0.8.
4
What is the severity of CVE-2021-33658?
CVE-2021-33658 has a severity rating of 7.8 (high).
5
How can I fix CVE-2021-33658?
To fix CVE-2021-33658, update atune to version 0.3-0.8 or later.