PT-2022-4946 · Huawei · Cv81-Wdm

Published 2022-08-04 · Updated 2022-09-22 · CVE-2022-37395

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CV81-WDM FW versions 01.70.49.29.46

Description The issue is related to insufficient input verification in the software of Huawei multifunctional devices, which can be exploited by a remote attacker to cause a denial of service (DoS) using a specially crafted malicious packet. Successful exploitation of this vulnerability may lead to DoS attacks.

Recommendations For CV81-WDM FW versions 01.70.49.29.46, update to a version that includes a fix for the input verification vulnerability to prevent potential DoS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-06138

CVE-2022-37395

Affected Products

Cv81-Wdm

References · 7

• https://osv.dev/vulnerability/CVE-2022-37395 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20220810-01-8cfecdcc-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06138 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-37395 · Security Note
• https://huawei.com/uk/psirt/security-advisories/2022/huawei-sa-20220810-01-8cfecdcc-en · Note
• https://t.me/cibsecurity/50166 · Telegram Post
• https://t.me/cvenotify/36655 · Telegram Post