Vulnerability · Published Sep 28, 2021 · Assigned by huawei
CVE-2021-37105
High 7.5
In plain English
A high-severity security flaw in FusionCompute. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.7%top 48.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | FusionCompute | 6.5.0,6.5.1,8.0.0 |