by Kastro
Paper/Archive/CVE-2021-37123

CVE-2021-37123

huawei — There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200.

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 57.2.572 × 2011.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.

Affected

ProductAffectedFixed inSource
Hero-CT060before 1.0.0.200–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuawei.com/en/psirt/security-advisories/huawei-sa-20210929-01-auth-en