CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2021-22314
https://notcve.org/view.php?id=CVE-2021-22314
There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service. Se presenta una vulnerabilidad de escalamiento de privilegios local en algunas versiones de ManageOne. Un atacante local autenticado podría llevar a cabo operaciones específicas para explotar esta vulnerabilidad. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210218-01-privilege-en •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2021-22311
https://notcve.org/view.php?id=CVE-2021-22311
There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include: ManageOne versions 8.0.0, 8.0.1. Se presenta una vulnerabilidad de asignación inapropiada de permisos en el producto Huawei ManageOne. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en • CWE-276: Incorrect Default Permissions •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2021-22293
https://notcve.org/view.php?id=CVE-2021-22293
Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1). Algunos productos de Huawei presentan una vulnerabilidad de interpretación inconsistente de peticiones HTTP. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en • CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') •
CVSS: 7.8EPSS: 0%CPEs: 41EXPL: 0CVE-2021-22299
https://notcve.org/view.php?id=CVE-2021-22299
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220. Se presenta una vulnerabilidad de escalada de privilegios local en algunos productos Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-02-privilege-en •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9205
https://notcve.org/view.php?id=CVE-2020-9205
There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device. Se presenta una vulnerabilidad de inyección de CSV en ManageOne versión 8.0.1. Un atacante con privilegio común puede explotar esta vulnerabilidad por medio de algunas operaciones para inyectar los archivos CSV. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-csvinjection-en • CWE-1236: Improper Neutralization of Formula Elements in a CSV File •