PT-2021-21458 · Hg8045Q · Hg8045Q

Published 2021-08-13 · Updated 2021-08-25 · CVE-2021-37028

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HG8045Q (affected versions not specified)

Description The issue concerns a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with administrator privilege could execute part of commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-37028

Affected Products

Hg8045Q

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-37028 · Security Note
• https://support.huawei.com/carrier/navi?coltype=software#col=software&from=product&detailId=PBI1-252279599&path=PBI1-252301455/PBI1-252303293/PBI1-23709862/PBI1-22318696/PBI1-21457383 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37028 · Vendor Advisory
• https://t.me/cibsecurity/27321 · Telegram Post
• https://t.me/cvenotify/19488 · Telegram Post
• http://jvn.jp/en/jp/JVN41646618/index.html · Note