CVEvulnerability

CVE-2021-39976

7.8 HIGH Published 2021-11-23 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2021-11-23
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

Affected configurations

• huawei cloudengine 5800 firmware v200r020c00spc600

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211103-01-privilege-en Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211103-01-privilege-en Vendor Advisory