Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22293

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1).

Published

2021-02-06T03:15:12.767

Last Modified

2024-11-21T05:49:51.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-444
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application huawei campusinsight v100r019c10 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 8.0.0 Yes
Operating System huawei taurus-al00a_firmware 10.0.0.1\(c00e1r1p1\) Yes
Hardware huawei taurus-al00a - No
References