CVE-2021-37123: Critical severity Huawei Hero-ct060 Firmware vulnerability
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-37123?
The severity of CVE-2021-37123 is classified as high due to the improper authentication allowing unauthorized operations.
How do I fix CVE-2021-37123?
To fix CVE-2021-37123, upgrade the Huawei Hero-CT060 firmware to version 1.0.0.200 or later.
Who is affected by CVE-2021-37123?
CVE-2021-37123 affects Huawei Hero-CT060 firmware versions prior to 1.0.0.200.
What types of operations can be exploited in CVE-2021-37123?
Successful exploitation of CVE-2021-37123 could allow an attacker to perform unauthorized operations that require user authentication.
Is there a workaround for CVE-2021-37123?
Currently, there are no documented workarounds for CVE-2021-37123; upgrading to the fixed version is recommended.