What is CVE-2021-22410?

CVE-2021-22410 is a medium-severity vulnerability in Huawei Imaster Nce-Fabric, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2021-11-23.

How severe is CVE-2021-22410?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Huawei Imaster Nce-Fabric

CVE-2021-22410

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Huawei Imaster_nce-fabric
Huawei Imaster_nce-fabric_firmware — versions v100r019c10
N/a Imaster Nce-fabric — versions V100R019C10

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22410?: CVE-2021-22410 is a medium-severity vulnerability in Huawei Imaster Nce-Fabric, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2021-11-23.
How severe is CVE-2021-22410?: Medium severity. CVSS v3 base score is 5.4 out of 10.