CVE-2021-22340

Severity Score

4.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cause the system to crash. Affected product versions include: ManageOne 6.5.1.SPC200, 8.0.0,8.0.0-LCND81, 8.0.0.SPC100, 8.0.1,8.0.RC2, 8.0.RC3, 8.0.RC3.SPC100;SMC2.0 V600R019C10SPC700,V600R019C10SPC702, V600R019C10SPC703,V600R019C10SPC800, V600R019C10SPC900, V600R019C10SPC910, V600R019C10SPC920, V600R019C10SPC921, V600R019C10SPC922, V600R019C10SPC930, V600R019C10SPC931

Se presenta una vulnerabilidad de condición de carrera de múltiples hilos en el producto de Huawei. Se presenta una condición de carrera para la lectura concurrente de I/O por múltiples hilos. Un atacante con el permiso de root puede explotar esta vulnerabilidad al llevar a cabo algunas operaciones. Una explotación con éxito de esta vulnerabilidad puede causar el bloqueo del sistema. Las versiones del producto afectadas incluyen: ManageOne 6.5.1.SPC200, 8.0.0,8.0.0-LCND81, 8.0.0.SPC100, 8.0.1,8.0.RC2, 8.0.RC3, 8.0.RC3.SPC100;SMC2. 0 V600R019C10SPC700,V600R019C10SPC702, V600R019C10SPC703,V600R019C10SPC800, V600R019C10SPC900, V600R019C10SPC910, V600R019C10SPC920, V600R019C10SPC921, V600R019C10SPC922, V600R019C10SPC930, V600R019C10SPC931

*Credits: N/A

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-01-05 CVE Reserved
2021-06-29 CVE Published
2023-03-08 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-racecondition-en	2021-07-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1"		spc200		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		-		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		lcnd81		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		rc2		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		rc3		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		rc3.spc100		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0"		spc100		Affected
Huawei Search vendor "Huawei"		Manageone Search vendor "Huawei" for product "Manageone"				8.0.1 Search vendor "Huawei" for product "Manageone" and version "8.0.1"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc700 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc700"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc702 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc702"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc703 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc703"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc800 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc800"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc900 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc900"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc910 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc910"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc920 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc920"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc921 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc921"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc922 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc922"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc930 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc930"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v600r019c10spc931 Search vendor "Huawei" for product "Smc2.0" and version "v600r019c10spc931"		-		Affected