Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.
References
Link | Resource |
---|---|
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-permission-en | Vendor Advisory |
Configurations
History
29 Jun 2021, 17:56
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-281 | |
References | (MISC) https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-permission-en - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 4.4
v3 : 6.5 |
CPE | cpe:2.3:h:huawei:e8372:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:e3372_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:huawei:e3372:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:e8372_firmware:*:*:*:*:*:*:*:* |
22 Jun 2021, 19:28
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-06-22 19:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-22382
Mitre link : CVE-2021-22382
CVE.ORG link : CVE-2021-22382
JSON object : View
Products Affected
huawei
- e8372
- e8372_firmware
- e3372
- e3372_firmware
CWE
CWE-281
Improper Preservation of Permissions