CVE-2021-37131: Input Validation
There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-37131?
CVE-2021-37131 has been rated as high severity due to its potential for CSV injection exploits.
How do I fix CVE-2021-37131?
To fix CVE-2021-37131, ensure that software updates are applied to affected versions of Huawei ManageOne and iManager NetEco.
What might an attacker gain by exploiting CVE-2021-37131?
An attacker exploiting CVE-2021-37131 could potentially manipulate CSV files to execute arbitrary commands.
Which versions are affected by CVE-2021-37131?
CVE-2021-37131 affects specific versions of Huawei ManageOne and iManager NetEco, particularly those listed in the vulnerability report.
Is CVE-2021-37131 related to input validation issues?
Yes, CVE-2021-37131 is caused by insufficient input validation of certain parameters.