PT-2021-21525 · Unknown · Hero-Ct060

Published 2021-10-11 · Updated 2021-10-18 · CVE-2021-37123

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hero-CT060 versions prior to 1.0.0.200

Description The issue is due to insufficient validation of a user's identity when performing certain operations. This could allow an attacker to perform operations that the user is not supposed to do.

Recommendations For versions prior to 1.0.0.200, update to version 1.0.0.200 or later to resolve the issue. As a temporary workaround, consider restricting access to certain operations until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-37123

Affected Products

Hero-Ct060

References · 5

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210929-01-auth-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37123 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37123 · Vendor Advisory
• https://t.me/cibsecurity/30357 · Telegram Post
• https://t.me/cvenotify/22285 · Telegram Post