CVE-2021-22299

Published Feb 6, 2021

Last updated 3 months ago

CVSS high 7.8

Overview

Description: There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220.
Source: psirt@huawei.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:huawei:imaster_mae-m:v100r020c10spc220:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F67A4BC-9424-458A-A24B-2AFF301329C4"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F14B3716-7A94-42C5-AE2C-9F64C15A43EC"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.0:rc2.b050:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E514234B-1DB4-4170-BC73-510058ED5788"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.0:spc100.b210:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1F587216-1355-4DD6-83E2-27CCE4ACC2E0"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CAE8F0E3-8BCA-4059-9BE1-A7BDFD18531A"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24872541-A493-48BD-AA2C-7A976FF75F9D"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61EC963F-1160-43D4-B4E4-2CC2B209B4DA"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B7820BE-0307-40F3-A7BD-66D5B8C7A0A6"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD086E38-D1F5-4160-A7A2-12E681F686CB"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "035E4DF1-4B17-448B-8A78-CD81F68D38CA"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DDDB5BDF-9760-4EE6-947D-A633B9CC0D36"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "31787857-76F6-4E80-82B7-56B1C12B6628"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b080:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3495FF32-2906-4064-A636-64EB3A06421D"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73901E08-8C24-46FB-A42D-6457630AA6DC"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc100.b050:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A472E9AA-784F-4AE2-B1D8-6C77EA1664B7"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc101.b010:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7CC07B4-FBF6-4AC9-8C54-B7845A068BBC"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc101.b040:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36904A81-9DCD-4E65-ADC1-A5A96FA0D939"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "481FA740-3E71-443D-99DF-89CA198951A2"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b010:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "37636652-DC9E-4310-AB33-1C67B85A7BF7"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b030:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C462984C-407A-4D52-BEDD-7E300482E2AF"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b040:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "154A70F1-C15A-41B1-97B8-89550595BF44"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b050:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B58D9F18-F7B5-4514-978D-EC419614F521"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b060:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD51B07E-213B-4D32-A121-E2FD124EA1A0"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b070:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7926B343-242E-414B-B573-84DB16A2FCBB"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "463A4059-55EF-4862-B8AD-90DCAC0CC871"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4042FC49-4FC7-46B4-8D14-ECACF22A9860"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4D8799F-9ADD-442F-BC39-4BCAFBFFBE2B"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "535597A4-29C8-44A8-9008-4F4E10030531"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EFA5EBB8-C174-4CF0-ADE6-15B62C10DD86"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E9090F1E-EF60-4E54-9885-7F6B1681DE9A"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51E51969-9D4D-4A58-BEBD-19F4BD64BC7A"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A1E9FF8-C0A4-47A5-9738-4D0ADB35DAF6"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:rc3.b041:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B552573-DB7A-4454-A832-AE1811A9577C"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:rc3.spc100:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5D17BA55-6032-4BC4-BEB3-4FB27BA81777"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7EDE7C94-7E89-45E6-8A79-32E53D9139DB"
          },
          {
            "criteria": "cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "47A8E919-FAC0-4011-927F-599AA7688A32"
          },
          {
            "criteria": "cpe:2.3:a:huawei:network_functions_virtualization_fusionsphere:6.5.1:spc12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD187FC7-B1BE-4BF1-BB6E-AA05CEFE4910"
          },
          {
            "criteria": "cpe:2.3:a:huawei:network_functions_virtualization_fusionsphere:6.5.1:spc23:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1FBB7636-4E6E-4621-9F42-9CDC8EB472F3"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:smc2.0_firmware:v600r019c00:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C2DC0656-EE97-43AF-9499-7ED8E31D6458"
          },
          {
            "criteria": "cpe:2.3:o:huawei:smc2.0_firmware:v600r019c10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C32980F5-E091-4B2F-A8D3-F30367C8B9C9"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References