PT-2021-15011 · Huawei · Huawei Lte Usb Dongle

Martin Rakhmanov · Published 2021-06-22 · Updated 2021-06-29 · CVE-2021-22382

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Huawei LTE USB Dongle products version E3372h-153TCPU-V200R002B333D01SP00C00

Description: The issue is related to an improper permission assignment, allowing an attacker to locally access and log in to a PC. The attacker can induce a user to install a specially crafted application, enabling them to perform unauthenticated operations.

Recommendations: For version E3372h-153TCPU-V200R002B333D01SP00C00, update to a version that fixes the improper permission assignment issue to prevent unauthenticated operations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2021-22382

Affected Products

Huawei Lte Usb Dongle

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22382 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-permission-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22382 · Vendor Advisory
• https://t.me/cibsecurity/25622 · Telegram Post