CVE-2021-37102: Command Injection
There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37102?
CVE-2021-37102 is a command injection vulnerability in the CMA service module of the FusionCompute product.
How does CVE-2021-37102 impact Huawei FusionCompute?
CVE-2021-37102 affects Huawei FusionCompute versions 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, and 8.0.0.
What is the severity of CVE-2021-37102?
CVE-2021-37102 has a severity score of 8.8 (critical).
How can the CVE-2021-37102 vulnerability be exploited?
CVE-2021-37102 can be exploited by an attacker providing specially crafted input to the default certificate file, leading to command injection.
Is there a fix available for CVE-2021-37102?
Yes, Huawei has released a security advisory with instructions for fixing CVE-2021-37102. Please refer to the official Huawei website for the advisory.