PT-2021-15065 · Elf-G10Hn · Elf-G10Hn

Published 2021-08-23 · Updated 2022-07-12 · CVE-2021-22449

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Elf-G10HN version 1.0.0.608

Description: The issue is related to a logic vulnerability. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, a successful exploit could allow an attacker to add users to be friends without prompting in the target device.

Recommendations: For Elf-G10HN version 1.0.0.608, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-22449

Affected Products

Elf-G10Hn

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-logic-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22449 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22449 · Vendor Advisory
• https://t.me/cibsecurity/27730 · Telegram Post