VULNERABILITY INTELLIGENCE
CVE-2021-22358
CVSS score4.3 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2021-05-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the device. Successful exploit may cause the service abnormal.
Weakness classification
- nvd@nist.gov: CWE-20
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory