Skip to main content

Manageone CVE-2021-22409

MEDIUM
2021-05-20 psirt@huawei.com
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
May 20, 2021 - 20:15 nvd
MEDIUM 5.3

DescriptionNVD

There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal.

AnalysisAI

There is a denial of service vulnerability in some versions of ManageOne. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal. Affected products include: Huawei Manageone.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2019-14835 HIGH POC
7.8 Sep 17

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that t

CVE-2021-22314 HIGH
7.8 Mar 22

There is a local privilege escalation vulnerability in some versions of ManageOne. Rated high severity (CVSS 7.8), this

CVE-2021-22299 HIGH
7.8 Feb 06

There is a local privilege escalation vulnerability in some Huawei products. Rated high severity (CVSS 7.8), this vulner

CVE-2021-22293 HIGH
7.5 Feb 06

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Rated high severity (CVSS 7.5),

CVE-2019-5289 HIGH
7.5 Nov 13

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insuffici

CVE-2021-22311 HIGH
7.2 Mar 22

There is an improper permission assignment vulnerability in Huawei ManageOne product. Rated high severity (CVSS 7.2), th

CVE-2020-9115 HIGH
7.2 Dec 01

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command

CVE-2021-37131 MEDIUM
6.8 Oct 27

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. Rated medium severity (CV

CVE-2021-22397 MEDIUM
6.7 Aug 02

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. Rated medium severity (CVSS 6.7), this vulnerab

CVE-2021-22339 MEDIUM
6.5 May 20

There is a denial of service vulnerability in some versions of ManageOne. Rated medium severity (CVSS 6.5), this vulnera

CVE-2021-22298 MEDIUM
6.5 Feb 06

There is a logic vulnerability in Huawei Gauss100 OLTP Product. Rated medium severity (CVSS 6.5), this vulnerability is

CVE-2021-22340 MEDIUM
4.1 Jun 29

There is a multiple threads race condition vulnerability in Huawei product. Rated medium severity (CVSS 4.1). No vendor

Share

CVE-2021-22409 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy