CVE-2021-37131
Severity Score
6.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.
Se presenta una vulnerabilidad de inyección CSV en ManageOne, iManager NetEco e iManager NetEco 6000. Un atacante con altos privilegios puede explotar esta vulnerabilidad mediante algunas operaciones para inyectar los archivos CSV. Debido a una comprobación de entrada insuficiente de algunos parámetros, el atacante puede explotar esta vulnerabilidad para inyectar archivos CSV en el dispositivo de destino
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-07-20 CVE Reserved
- 2021-10-27 CVE Published
- 2023-05-19 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-1236: Improper Neutralization of Formula Elements in a CSV File
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211020-01-csv-en | 2021-10-29 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc1.b060 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc1.b070 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b020 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b030 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b040 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b050 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b060 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b070 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1" | rc2.b090 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | b010 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | b020 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | b030 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | b040 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc100.b050 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc101.b010 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc101.b040 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b010 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b030 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b040 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b050 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b060 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 6.5.1.1 Search vendor "Huawei" for product "Manageone" and version "6.5.1.1" | spc200.b070 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | lcn080 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | lcnd81 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | rc2 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | rc3 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.0 Search vendor "Huawei" for product "Manageone" and version "8.0.0" | spc100 |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Manageone Search vendor "Huawei" for product "Manageone" | 8.0.1 Search vendor "Huawei" for product "Manageone" and version "8.0.1" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp2001 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp2001" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp2002 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp2002" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp3001 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp3001" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp3002 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp3002" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp3101 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp3101" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00cp3102 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00cp3102" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc100 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc100" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc110 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc110" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc120 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc120" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc200 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc200" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc210 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc210" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc300 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc300" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco Search vendor "Huawei" for product "Imanager Neteco" | v600r010c00spc310 Search vendor "Huawei" for product "Imanager Neteco" and version "v600r010c00spc310" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00cp2201 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00cp2201" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00cp2301 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00cp2301" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc100 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc100" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc110 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc110" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc120 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc120" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc190 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc190" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc200 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc200" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc201 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc201" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc202 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc202" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc210 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc210" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc220 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc220" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc221 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc221" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc230 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc230" | - |
Affected
| ||||||
| Huawei Search vendor "Huawei" | Imanager Neteco 6000 Search vendor "Huawei" for product "Imanager Neteco 6000" | v600r009c00spc232 Search vendor "Huawei" for product "Imanager Neteco 6000" and version "v600r009c00spc232" | - |
Affected
| ||||||