CVE-2021-37105 — Unrestricted File Upload in Huawei Fusioncompute

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 60.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Fusioncompute
Timeline
PublishedSep 28
Latest updateMay 24

Description

There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5huawei/fusioncompute6.5.0,6.5.1,8.0.0
▶NVDhuawei/fusioncompute6.5.0, 6.5.1, 8.0.0+2

🔴Vulnerability Details

2
GHSA
GHSA-g2c4-qjc4-5v7v: There is an improper file upload control vulnerability in FusionCompute 6↗2022-05-24
▶
CVEList
CVE-2021-37105: There is an improper file upload control vulnerability in FusionCompute 6↗2021-09-28
▶
CVE-2021-37105 — Unrestricted File Upload in Huawei | cvebase