CVE-2021-22382

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:huawei:e3372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:e3372:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:huawei:e8372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:e8372:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:50

Type Values Removed Values Added
References () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-permission-en - Vendor Advisory () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-permission-en - Vendor Advisory

Information

Published : 2021-06-22 19:15

Updated : 2024-11-21 05:50


NVD link : CVE-2021-22382

Mitre link : CVE-2021-22382

CVE.ORG link : CVE-2021-22382


JSON object : View

Products Affected

huawei

  • e8372_firmware
  • e3372_firmware
  • e3372
  • e8372
CWE
CWE-281

Improper Preservation of Permissions