Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-37131

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.

Published

2021-10-27T01:15:07.863

Last Modified

2024-11-21T06:14:42.373

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-1236
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 6.5.1.1 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.0 Yes
Application huawei manageone 8.0.1 Yes
Hardware huawei imanager_neteco v600r010c00cp2001 Yes
Hardware huawei imanager_neteco v600r010c00cp2002 Yes
Hardware huawei imanager_neteco v600r010c00cp3001 Yes
Hardware huawei imanager_neteco v600r010c00cp3002 Yes
Hardware huawei imanager_neteco v600r010c00cp3101 Yes
Hardware huawei imanager_neteco v600r010c00cp3102 Yes
Hardware huawei imanager_neteco v600r010c00spc100 Yes
Hardware huawei imanager_neteco v600r010c00spc110 Yes
Hardware huawei imanager_neteco v600r010c00spc120 Yes
Hardware huawei imanager_neteco v600r010c00spc200 Yes
Hardware huawei imanager_neteco v600r010c00spc210 Yes
Hardware huawei imanager_neteco v600r010c00spc300 Yes
Hardware huawei imanager_neteco v600r010c00spc310 Yes
Hardware huawei imanager_neteco_6000 v600r009c00cp2201 Yes
Hardware huawei imanager_neteco_6000 v600r009c00cp2301 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc100 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc110 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc120 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc190 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc200 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc201 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc202 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc210 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc220 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc221 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc230 Yes
Hardware huawei imanager_neteco_6000 v600r009c00spc232 Yes
References