CVE-2021-22329 : There has a license management vulnerability in some Huawei products. An attacke

There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper license management of the device, as a result, the license file can be applied and affect integrity of the device. Affected product versions include:S12700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S1700 V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S2700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S5700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S6700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S7700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S9700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10.

Published 2021-06-29 20:15:08

Updated 2021-07-07 11:34:53

Source Huawei Technologies

View at NVD, CVE.org

Products affected by CVE-2021-22329

Huawei » S7700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s7700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s7700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s7700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r007c01
cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s9700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r007c01b102
cpe:2.3:o:huawei:s9700_firmware:v200r007c01b102:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s9700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s9700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r007c01
cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s12700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r007c01b102
cpe:2.3:o:huawei:s12700_firmware:v200r007c01b102:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s12700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s12700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S12700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s12700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S12700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s5700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s5700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s5700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s5700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r011c10spc100
cpe:2.3:o:huawei:s5700_firmware:v200r011c10spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s6700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s6700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s6700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s6700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r011c10spc100
cpe:2.3:o:huawei:s6700_firmware:v200r011c10spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S2700 Firmware » Version: V200r008c00
cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S2700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s2700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S2700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s2700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S2700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s2700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S2700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s2700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S1700 Firmware » Version: V200r011c10
cpe:2.3:o:huawei:s1700_firmware:v200r011c10:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S1700 » Version: N/A
Huawei » S1700 Firmware » Version: V200r010c00spc300
cpe:2.3:o:huawei:s1700_firmware:v200r010c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S1700 » Version: N/A
Huawei » S1700 Firmware » Version: V200r011c00
cpe:2.3:o:huawei:s1700_firmware:v200r011c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S1700 » Version: N/A
Huawei » S1700 Firmware » Version: V200r011c00spc100
cpe:2.3:o:huawei:s1700_firmware:v200r011c00spc100:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S1700 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-22329

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-22329

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	1.2	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

References for CVE-2021-22329

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-resourcemanagement-en

Security Advisory - Improper Licenses Management Vulnerability in Some Products
Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-22329

Products affected by CVE-2021-22329

Exploit prediction scoring system (EPSS) score for CVE-2021-22329

CVSS scores for CVE-2021-22329

References for CVE-2021-22329