cbcvebase.
CVE-2021-22377
published 2021-06-22

CVE-2021-22377: There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700…

high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.

Affected

5 ranges
VendorProductVersion rangeFixed in
huaweis12700_firmware——
huaweis2700_firmware——
huaweis5700_firmware——
huaweis6700_firmware——
huaweis7700_firmware——