← Back

CVE-2021-22382

nvd nist
Published: Jun 22, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Exploitability: 0.6 / Impact: 5.9
Source: NVD

Description

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.

Affected (2)

Huawei
2 products
E3372 Firmware
E8372 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
E3372 Firmware
Before 22.333.03.00.00
Running on/withPlatform Versions
Huawei
E3372
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
E8372 Firmware
Before 21.333.03.00.00
Running on/withPlatform Versions
Huawei
E8372
All versions

Related CWEs

CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.