Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22329


There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper license management of the device, as a result, the license file can be applied and affect integrity of the device. Affected product versions include:S12700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S1700 V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S2700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S5700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S6700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S7700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S9700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 4.9, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction . The vulnerability impacts integrity (unauthorized modifications), for affected systems. Impacting 14 products from huawei, from huawei, from huawei and 11 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2021-06-29T20:15:08.083

Last Modified

2024-11-21T05:49:55.350

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei s12700_firmware v200r007c01 Yes
Operating System huawei s12700_firmware v200r007c01b102 Yes
Operating System huawei s12700_firmware v200r008c00 Yes
Operating System huawei s12700_firmware v200r010c00spc300 Yes
Operating System huawei s12700_firmware v200r011c00 Yes
Operating System huawei s12700_firmware v200r011c00spc100 Yes
Operating System huawei s12700_firmware v200r011c10 Yes
Hardware huawei s12700 - No
Operating System huawei s1700_firmware v200r010c00spc300 Yes
Operating System huawei s1700_firmware v200r011c00 Yes
Operating System huawei s1700_firmware v200r011c00spc100 Yes
Operating System huawei s1700_firmware v200r011c10 Yes
Hardware huawei s1700 - No
Operating System huawei s2700_firmware v200r008c00 Yes
Operating System huawei s2700_firmware v200r010c00spc300 Yes
Operating System huawei s2700_firmware v200r011c00 Yes
Operating System huawei s2700_firmware v200r011c00spc100 Yes
Operating System huawei s2700_firmware v200r011c10 Yes
Hardware huawei s2700 - No
Operating System huawei s5700_firmware v200r008c00 Yes
Operating System huawei s5700_firmware v200r010c00spc300 Yes
Operating System huawei s5700_firmware v200r011c00 Yes
Operating System huawei s5700_firmware v200r011c00spc100 Yes
Operating System huawei s5700_firmware v200r011c10 Yes
Operating System huawei s5700_firmware v200r011c10spc100 Yes
Hardware huawei s5700 - No
Operating System huawei s6700_firmware v200r008c00 Yes
Operating System huawei s6700_firmware v200r010c00spc300 Yes
Operating System huawei s6700_firmware v200r011c00 Yes
Operating System huawei s6700_firmware v200r011c00spc100 Yes
Operating System huawei s6700_firmware v200r011c10 Yes
Operating System huawei s6700_firmware v200r011c10spc100 Yes
Hardware huawei s6700 - No
Operating System huawei s7700_firmware v200r008c00 Yes
Operating System huawei s7700_firmware v200r010c00spc300 Yes
Operating System huawei s7700_firmware v200r011c00 Yes
Operating System huawei s7700_firmware v200r011c00spc100 Yes
Operating System huawei s7700_firmware v200r011c10 Yes
Hardware huawei s7700 - No
Operating System huawei s9700_firmware v200r007c01 Yes
Operating System huawei s9700_firmware v200r007c01b102 Yes
Operating System huawei s9700_firmware v200r008c00 Yes
Operating System huawei s9700_firmware v200r010c00spc300 Yes
Operating System huawei s9700_firmware v200r011c00 Yes
Operating System huawei s9700_firmware v200r011c00spc100 Yes
Operating System huawei s9700_firmware v200r011c10 Yes
Hardware huawei s9700 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For huawei's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.