medium6.5
CVE-2021-22382
Huawei LTE USB Dongle products have an improper permission assignment vulnerability.
Impact
Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | E3372 Firmware | before 22.333.03.00.00 |
| Huawei | E8372 Firmware | before 21.333.03.00.00 |