PT-2021-21520 · Unknown · Ais-Bw50-00

Published 2021-09-09 · Updated 2022-05-03 · CVE-2021-37101

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIS-BW50-00 version 9.0.6.2(H100SP10C00) AIS-BW50-00 version 9.0.6.2(H100SP15C00)

Description The issue is related to improper authorization management, allowing an attacker to exploit the vulnerability by physically accessing the device and implanting malicious code. Successful exploitation could lead to arbitrary code execution in the target device.

Recommendations For AIS-BW50-00 version 9.0.6.2(H100SP10C00), there is no information about a newer version that contains a fix for this vulnerability. For AIS-BW50-00 version 9.0.6.2(H100SP15C00), there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-37101

Affected Products

Ais-Bw50-00

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-37101 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37101 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210908-01-badauthorization-en · Vendor Advisory
• https://t.me/cibsecurity/28593 · Telegram Post