CVE-2021-22377: huawei s12700_firmware Improper Input Validation
Vulnerability summary
CVE-2021-22377 is a high (CVSS 7.2) Improper Input Validation vulnerability in huawei s12700_firmware. EPSS estimates a 0.92% chance of exploitation in the next 30 days, higher than 59.5% of scored vulnerabilities.
Timeline
- 22-06-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.92%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.92% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei5 products
- s12700_firmwarev200r019c00spc500
- s2700_firmwarev200r019c00spc500
- s5700_firmwarev200r019c00spc500
- s6700_firmwarev200r019c00spc500
- s7700_firmwarev200r019c00spc500
1 vendor · 5 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-cmdinj-enX Refsource MISCVendor Advisory