CVE-2021-37124: Path Traversal
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-37124?
CVE-2021-37124 is rated as a high-severity vulnerability due to its potential for path traversal and unauthorized file access.
How do I fix CVE-2021-37124?
To fix CVE-2021-37124, update Huawei PC Smart Full Scene to version 11.1 or Huawei PC Manager to version 11.1.1.97 or later.
What software is affected by CVE-2021-37124?
CVE-2021-37124 affects Huawei PC Smart Full Scene version 11.1 and Huawei PC Manager version 11.1.1.97.
What does CVE-2021-37124 allow an attacker to do?
CVE-2021-37124 allows an attacker to exploit the path traversal vulnerability to construct file paths that may grant unauthorized file access.
Are there any mitigations for CVE-2021-37124 before updating?
There are no effective mitigations for CVE-2021-37124 other than applying the appropriate updates to the affected software.