VULNERABILITY INTELLIGENCE

CVE-2021-22397

CVSS score6.7 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2021-08-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when they are be called. Attackers can exploit this vulnerability by performing these files to cause privilege escalation attack. This can compromise normal service.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references