Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-22382

Опубликовано: 22 июн. 2021
Источник: nvd
CVSS3: 6.5
CVSS2: 4.4
EPSS Низкий

Описание

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:e3372_firmware:*:*:*:*:*:*:*:*
Версия до 22.333.03.00.00 (исключая)
cpe:2.3:h:huawei:e3372:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:huawei:e8372_firmware:*:*:*:*:*:*:*:*
Версия до 21.333.03.00.00 (исключая)
cpe:2.3:h:huawei:e8372:-:*:*:*:*:*:*:*

EPSS

Процентиль: 5%
0.00022
Низкий

6.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-281

Связанные уязвимости

github
больше 3 лет назад

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.

EPSS

Процентиль: 5%
0.00022
Низкий

6.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-281