CVE-2021-22340
Summary
| CVE | CVE-2021-22340 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-06-29 19:15:00 UTC |
| Updated | 2021-07-07 12:34:00 UTC |
| Description | There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cause the system to crash. Affected product versions include: ManageOne 6.5.1.SPC200, 8.0.0,8.0.0-LCND81, 8.0.0.SPC100, 8.0.1,8.0.RC2, 8.0.RC3, 8.0.RC3.SPC100;SMC2.0 V600R019C10SPC700,V600R019C10SPC702, V600R019C10SPC703,V600R019C10SPC800, V600R019C10SPC900, V600R019C10SPC910, V600R019C10SPC920, V600R019C10SPC921, V600R019C10SPC922, V600R019C10SPC930, V600R019C10SPC931 |
Risk And Classification
Problem Types: CWE-362
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Huawei | Manageone | 6.5.1 | spc200 | All | All |
| Application | Huawei | Manageone | 8.0.0 | - | All | All |
| Application | Huawei | Manageone | 8.0.0 | lcnd81 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc2 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3.spc100 | All | All |
| Application | Huawei | Manageone | 8.0.0 | spc100 | All | All |
| Application | Huawei | Manageone | 8.0.1 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc700 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc702 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc703 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc800 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc900 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc910 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc920 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc921 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc922 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc930 | All | All | All |
| Application | Huawei | Smc2.0 | v600r019c10spc931 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Multiple Threads Race Condition Vulnerability in Huawei Product | MISC | www.huawei.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.