What is CVE-2021-37101?

CVE-2021-37101 is a medium-severity vulnerability in Huawei Ais-Bw50-00. CVSS score: 6.8/10. Published 2021-09-09.

How severe is CVE-2021-37101?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Huawei Ais-Bw50-00

CVE-2021-37101

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by physical accessing the device and implant malicious code. Successfully exploit could leads to arbitrary code execution in the target device.

EPSS: 0.002 (11.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Ais-bw50-00
Huawei Ais-bw50-00_firmware — versions 9.0.6.2\(h100sp10c00\), 9.0.6.2\(h100sp15c00\)
N/a Ais-bw50-00 — versions 9.0.6.2(H100SP10C00),9.0.6.2(H100SP15C00)

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-37101?: CVE-2021-37101 is a medium-severity vulnerability in Huawei Ais-Bw50-00. CVSS score: 6.8/10. Published 2021-09-09.
How severe is CVE-2021-37101?: Medium severity. CVSS v3 base score is 6.8 out of 10.