Vulnerability Intelligence Report
CVE-2021-22377
There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.
No Active Exploit Signals
CVSS Base Score
7.2
HIGH
EPSS Probability:0.92%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| huawei | s12700_firmware | v200r019c00spc500 |
| huawei | s12700 | all |
| huawei | s2700_firmware | v200r019c00spc500 |
| huawei | s2700 | all |
| huawei | s5700_firmware | v200r019c00spc500 |
| huawei | s5700 | all |
| huawei | s6700_firmware | v200r019c00spc500 |
| huawei | s6700 | all |
| huawei | s7700_firmware | v200r019c00spc500 |
| huawei | s7700 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.917%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Huawei Technologies · Vendor · China |
| Reserved | 2021-01-05T00:00:00 |
| Published | 2021-06-22T18:10:10 |
| Last Updated | 2024-08-03T18:44:12 |
Community Chatter & Buzz