7.5
CVE-2021-37105
- EPSS 0.18%
- Veröffentlicht 28.09.2021 15:15:07
- Zuletzt bearbeitet 21.11.2024 06:14:39
- Quelle psirt@huawei.com
- Teams Watchlist Login
- Unerledigt Login
There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Fusioncompute Version6.5.0
Huawei ≫ Fusioncompute Version6.5.1
Huawei ≫ Fusioncompute Version8.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.367 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.