Lucene search

[email protected]CVE-2021-22340

HistoryJun 29, 2021 - 7:15 p.m.

CVE-2021-22340

2021-06-2919:15:09

CWE-362

[email protected]

web.nvd.nist.gov

huawei

vulnerability

cve-2021-22340

security

system crash

manageone

smc2.0

nvd

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cause the system to crash. Affected product versions include: ManageOne 6.5.1.SPC200, 8.0.0,8.0.0-LCND81, 8.0.0.SPC100, 8.0.1,8.0.RC2, 8.0.RC3, 8.0.RC3.SPC100;SMC2.0 V600R019C10SPC700,V600R019C10SPC702, V600R019C10SPC703,V600R019C10SPC800, V600R019C10SPC900, V600R019C10SPC910, V600R019C10SPC920, V600R019C10SPC921, V600R019C10SPC922, V600R019C10SPC930, V600R019C10SPC931

Affected configurations

NVD

Node

huaweimanageoneMatch6.5.1spc200

huaweimanageoneMatch8.0.0-

huaweimanageoneMatch8.0.0lcnd81

huaweimanageoneMatch8.0.0rc2

huaweimanageoneMatch8.0.0rc3

huaweimanageoneMatch8.0.0rc3.spc100

huaweimanageoneMatch8.0.0spc100

huaweimanageoneMatch8.0.1

huaweismc2.0Matchv600r019c10spc700

huaweismc2.0Matchv600r019c10spc702

huaweismc2.0Matchv600r019c10spc703

huaweismc2.0Matchv600r019c10spc800

huaweismc2.0Matchv600r019c10spc900

huaweismc2.0Matchv600r019c10spc910

huaweismc2.0Matchv600r019c10spc920

huaweismc2.0Matchv600r019c10spc921

huaweismc2.0Matchv600r019c10spc922

huaweismc2.0Matchv600r019c10spc930

huaweismc2.0Matchv600r019c10spc931

CPENameOperatorVersion
huawei:manageonehuawei manageoneeq6.5.1
huawei:manageonehuawei manageoneeq8.0.0
huawei:manageonehuawei manageoneeq8.0.1
huawei:smc2.0huawei smc2.0eqv600r019c10spc700
huawei:smc2.0huawei smc2.0eqv600r019c10spc702
huawei:smc2.0huawei smc2.0eqv600r019c10spc703
huawei:smc2.0huawei smc2.0eqv600r019c10spc800
huawei:smc2.0huawei smc2.0eqv600r019c10spc900
huawei:smc2.0huawei smc2.0eqv600r019c10spc910
huawei:smc2.0huawei smc2.0eqv600r019c10spc920

CPE	Name	Operator	Version
huawei:manageone	huawei manageone	eq	6.5.1
huawei:manageone	huawei manageone	eq	8.0.0
huawei:manageone	huawei manageone	eq	8.0.1
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc700
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc702
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc703
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc800
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc900
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc910
huawei:smc2.0	huawei smc2.0	eq	v600r019c10spc920

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "product": "ManageOne;SMC2.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.1.SPC200,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.SPC100"
      },
      {
        "status": "affected",
        "version": "V600R019C10SPC700,V600R019C10SPC702,V600R019C10SPC703,V600R019C10SPC800,V600R019C10SPC900,V600R019C10SPC910,V600R019C10SPC920,V600R019C10SPC921,V600R019C10SPC922,V600R019C10SPC930,V600R019C10SPC931"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-racecondition-en

Social References

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-22340

nvd1 prion1 cvelist1 cnvd1 huawei1