NetSight
high7.5

CVE-2021-22293

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability.

Impact

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1).

Affected products

VendorProductAffected versions
HuaweiCampusinsight
Version v100r019c10
HuaweiManageone
Versions 6.5.1.1, 8.0.0
HuaweiTaurus-Al00a Firmware
Version 10.0.0.1\(c00e1r1p1\)

Weakness classification

References