CVE-2021-37131
Summary
| CVE | CVE-2021-37131 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-10-27 01:15:00 UTC |
| Updated | 2021-10-29 01:26:00 UTC |
| Description | There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device. |
Risk And Classification
Problem Types: CWE-1236
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Imanager Neteco | v600r010c00cp2001 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00cp2002 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00cp3001 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00cp3002 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00cp3101 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00cp3102 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc100 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc110 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc120 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc200 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc210 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc300 | All | All | All |
| Hardware | Huawei | Imanager Neteco | v600r010c00spc310 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00cp2201 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00cp2301 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc100 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc110 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc120 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc190 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc200 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc201 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc202 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc210 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc220 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc221 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc230 | All | All | All |
| Hardware | Huawei | Imanager Neteco 6000 | v600r009c00spc232 | All | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc1.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc1.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b020 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1 | rc2.b090 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc100.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b070 | All | All |
| Application | Huawei | Manageone | 8.0.0 | - | All | All |
| Application | Huawei | Manageone | 8.0.0 | lcn080 | All | All |
| Application | Huawei | Manageone | 8.0.0 | lcnd81 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc2 | All | All |
| Application | Huawei | Manageone | 8.0.0 | rc3 | All | All |
| Application | Huawei | Manageone | 8.0.0 | spc100 | All | All |
| Application | Huawei | Manageone | 8.0.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - CSV Injection Vulnerability in Some Huawei Products | MISC | www.huawei.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.