CVE-2021-22299
Summary
| CVE | CVE-2021-22299 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-06 02:15:00 UTC |
| Updated | 2022-07-12 17:42:00 UTC |
| Description | There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Huawei | Imaster Mae-m | v100r020c10spc220 | All | All | All |
| Application | Huawei | Imaster Mae-m | v100r020c10spc220 | All | All | All |
| Application | Huawei | Manageone | 6.5.0 | - | All | All |
| Application | Huawei | Manageone | 6.5.0 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.0 | spc100.b210 | All | All |
| Application | Huawei | Manageone | 6.5.1 | - | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc1.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b020 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b090 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc100.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc101.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc101.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 8.0.0 | - | All | All |
| Application | Huawei | Manageone | 8.0.0 | lcnd81 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc2 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3.b041 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3.spc100 | All | All |
| Application | Huawei | Manageone | 8.0.0 | spc100 | All | All |
| Application | Huawei | Manageone | 8.0.1 | All | All | All |
| Application | Huawei | Manageone | 6.5.0 | - | All | All |
| Application | Huawei | Manageone | 6.5.0 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.0 | spc100.b210 | All | All |
| Application | Huawei | Manageone | 6.5.1 | - | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc1.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b020 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b090 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc100.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc101.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc101.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | spc200.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 8.0.0 | - | All | All |
| Application | Huawei | Manageone | 8.0.0 | lcnd81 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc2 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3.b041 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3.spc100 | All | All |
| Application | Huawei | Manageone | 8.0.0 | spc100 | All | All |
| Application | Huawei | Manageone | 8.0.1 | All | All | All |
| Application | Huawei | Network Functions Virtualization Fusionsphere | 6.5.1 | spc12 | All | All |
| Application | Huawei | Network Functions Virtualization Fusionsphere | 6.5.1 | spc23 | All | All |
| Application | Huawei | Network Functions Virtualization Fusionsphere | 6.5.1 | spc12 | All | All |
| Application | Huawei | Network Functions Virtualization Fusionsphere | 6.5.1 | spc23 | All | All |
| Hardware | Huawei | Smc2.0 | - | All | All | All |
| Hardware | Huawei | Smc2.0 | - | All | All | All |
| Hardware | Huawei | Smc2.0 | - | All | All | All |
| Operating System | Huawei | Smc2.0 Firmware | v600r019c00 | All | All | All |
| Operating System | Huawei | Smc2.0 Firmware | v600r019c10 | All | All | All |
| Operating System | Huawei | Smc2.0 Firmware | v600r019c00 | All | All | All |
| Operating System | Huawei | Smc2.0 Firmware | v600r019c10 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Local Privilege Escalation Vulnerability in Some Huawei Products | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.