CVEvulnerability

CVE-2021-37106

7.2 HIGH Published 2021-09-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-77

Description

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.

Affected configurations

• huawei fusioncompute 6.3.0 • huawei fusioncompute 6.3.1 • huawei fusioncompute 6.5.0 • huawei fusioncompute 8.0.0

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References