Cyber Resilience

CVE-2021-22293

High

Published: 06 February 2021

Published
06 February 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0013 32.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-22293 is a high-severity HTTP Request/Response Smuggling (CWE-444) vulnerability in Huawei Manageone. Its CVSS base score is 7.5 (High).

Operationally, ranked at the 32.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A…

more

versions 10.0.0.1(C00E1R1P1).

CWE(s)
CWE-444

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

huawei
campusinsight
v100r019c10
huawei
manageone
6.5.1.1, 8.0.0
huawei
taurus-al00a firmware
10.0.0.1\(c00e1r1p1\)

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References