Security Advisory - Server-Side Request Forgery Vulnerability in Huawei Product

There is a server-side request forgery vulnerability in huawei product. This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do. (Vulnerability ID: HWPSIRT-2020-35722)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2021-37104.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-ssrf-en&gt;