CVE-2021-37104: SSRF
There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-37104?
The severity of CVE-2021-37104 is high with a score of 7.5.
What is the vulnerability type of CVE-2021-37104?
CVE-2021-37104 is a server-side request forgery (SSRF) vulnerability.
How does the SSRF vulnerability in CVE-2021-37104 occur?
The SSRF vulnerability in CVE-2021-37104 occurs due to insufficient validation of parameters while processing messages.
What is the impact of exploiting CVE-2021-37104?
Exploiting CVE-2021-37104 can allow an attacker to gain unauthorized access to certain resources.
Is there a fix available for CVE-2021-37104?
It is recommended to apply the security patches provided by Huawei to fix CVE-2021-37104.