CVE-2021-37101

2021-09-0913:13:40

huawei

www.cve.org

improper authorization

ais-bw50-00

vulnerability

arbitrary code execution

physical access

EPSS

0.001

Percentile

36.8%

JSON

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by physical accessing the device and implant malicious code. Successfully exploit could leads to arbitrary code execution in the target device.

CNA Affected

[
  {
    "product": "AIS-BW50-00",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.6.2(H100SP10C00),9.0.6.2(H100SP15C00)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20210908-01-badauthorization-en

EPSS

0.001

Percentile

36.8%

JSON

Related for CVELIST:CVE-2021-37101