Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-22377

There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
Products affected by CVE-2021-22377
  • Huawei » S12700 » Version: N/A
    cpe:2.3:h:huawei:s12700:-
  • Huawei » S2700 » Version: N/A
    cpe:2.3:h:huawei:s2700:-
  • Huawei » S5700 » Version: N/A
    cpe:2.3:h:huawei:s5700:-
  • Huawei » S6700 » Version: N/A
    cpe:2.3:h:huawei:s6700:-
  • Huawei » S7700 » Version: N/A
    cpe:2.3:h:huawei:s7700:-
  • Huawei » S12700 Firmware » Version: v200r019c00spc500
    cpe:2.3:o:huawei:s12700_firmware:v200r019c00spc500
  • Huawei » S2700 Firmware » Version: v200r019c00spc500
    cpe:2.3:o:huawei:s2700_firmware:v200r019c00spc500
  • Huawei » S5700 Firmware » Version: v200r019c00spc500
    cpe:2.3:o:huawei:s5700_firmware:v200r019c00spc500
  • Huawei » S6700 Firmware » Version: v200r019c00spc500
    cpe:2.3:o:huawei:s6700_firmware:v200r019c00spc500
  • Huawei » S7700 Firmware » Version: v200r019c00spc500
    cpe:2.3:o:huawei:s7700_firmware:v200r019c00spc500


Contact Us

Shodan ® - All rights reserved