| |
Vulnerability CVE-2021-22339
Published: 2021-05-20
Description: |
There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal. |
Type:
CWE-345 (Insufficient Verification of Data Authenticity)
CVSS2 => (AV:N/AC:M/Au:S/C:N/I:N/A:P)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
3.5/10 |
2.9/10 |
6.8/10 |
Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
Single time |
Confidentiality impact |
Integrity impact |
Availability impact |
None |
None |
Partial |
References: |
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-dos-en
|
|
|
closedb();
?>
Copyright 2024, cxsecurity.com
|
|
|