CVE-2021-22329

🗓️ 29 Jun 2021 19:05:31Reported by huaweiType

There is a license management vulnerability in some Huawei products, allowing high-privileged attackers to compromise device integrity by applying a license file

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of Huawei’s micro-program code in software and hardware devices relates to improper handling of device licenses, allowing attackers to compromise the integrity of protected information.	13 Jul 202100:00	–	bdu_fstec
Circl	CVE-2021-22329	30 Jun 202100:29	–	circl
CNNVD	Huawei S2700 安全漏洞	29 Jun 202100:00	–	cnnvd
CNVD	Incorrect license management vulnerability for multiple Huawei products	1 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-22329	29 Jun 202119:05	–	cvelist
EUVD	EUVD-2021-9475	3 Oct 202520:07	–	euvd
Huawei	Security Advisory - Improper Licenses Management Vulnerability in Some Products	7 Apr 202100:00	–	huawei
NVD	CVE-2021-22329	29 Jun 202120:15	–	nvd
OpenVAS	Huawei Data Communication: Improper Licenses Management Vulnerability in Some Products (huawei-sa-20210407-01-resourcemanagement)	30 Jun 202100:00	–	openvas
OSV	CVE-2021-22329	29 Jun 202120:15	–	osv

NVD

Vulners

Node

huawei s12700_firmwareMatchv200r007c01

huawei s12700_firmwareMatchv200r007c01b102

huawei s12700_firmwareMatchv200r008c00

huawei s12700_firmwareMatchv200r010c00spc300

huawei s12700_firmwareMatchv200r011c00

huawei s12700_firmwareMatchv200r011c00spc100

huawei s12700_firmwareMatchv200r011c10

AND

huawei s12700Match-

Node

huawei s1700_firmwareMatchv200r010c00spc300

huawei s1700_firmwareMatchv200r011c00

huawei s1700_firmwareMatchv200r011c00spc100

huawei s1700_firmwareMatchv200r011c10

AND

huawei s1700Match-

Node

huawei s2700_firmwareMatchv200r008c00

huawei s2700_firmwareMatchv200r010c00spc300

huawei s2700_firmwareMatchv200r011c00

huawei s2700_firmwareMatchv200r011c00spc100

huawei s2700_firmwareMatchv200r011c10

AND

huawei s2700Match-

Node

huawei s5700_firmwareMatchv200r008c00

huawei s5700_firmwareMatchv200r010c00spc300

huawei s5700_firmwareMatchv200r011c00

huawei s5700_firmwareMatchv200r011c00spc100

huawei s5700_firmwareMatchv200r011c10

huawei s5700_firmwareMatchv200r011c10spc100

AND

huawei s5700Match-

Node

huawei s6700_firmwareMatchv200r008c00

huawei s6700_firmwareMatchv200r010c00spc300

huawei s6700_firmwareMatchv200r011c00

huawei s6700_firmwareMatchv200r011c00spc100

huawei s6700_firmwareMatchv200r011c10

huawei s6700_firmwareMatchv200r011c10spc100

AND

huawei s6700Match-

Node

huawei s7700_firmwareMatchv200r008c00

huawei s7700_firmwareMatchv200r010c00spc300

huawei s7700_firmwareMatchv200r011c00

huawei s7700_firmwareMatchv200r011c00spc100

huawei s7700_firmwareMatchv200r011c10

AND

huawei s7700Match-

Node

huawei s9700_firmwareMatchv200r007c01

huawei s9700_firmwareMatchv200r007c01b102

huawei s9700_firmwareMatchv200r008c00

huawei s9700_firmwareMatchv200r010c00spc300

huawei s9700_firmwareMatchv200r011c00

huawei s9700_firmwareMatchv200r011c00spc100

huawei s9700_firmwareMatchv200r011c10

AND

huawei s9700Match-

[
  {
    "product": "S12700;S1700;S2700;S5700;S6700;S7700;S9700",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10"
      },
      {
        "status": "affected",
        "version": "V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-resourcemanagement-en

21 Nov 2024 05:49Current

5Medium risk

Vulners AI Score5

CVSS 24

CVSS 3.14.9

EPSS0.00088