Race Condition Vulnerability in Huawei ManageOne and SMC Products
CVE-2021-22340

4.1MEDIUM

Key Information:

Vendor
Huawei
Status
Manageone;smc2.0
Vendor
CVE Published:
29 June 2021

Summary

A race condition vulnerability has been identified in Huawei's ManageOne and SMC products, allowing a potential attacker with root permissions to exploit the issue through concurrent I/O reads by multiple threads. The exploitation can lead to system crashes, significantly impacting the availability of affected systems. This vulnerability is particularly prevalent in specific versions of ManageOne and SMC, highlighting the importance of timely updates and security patches to mitigate the risks associated with such exploitations.

Affected Version(s)

ManageOne;SMC2.0 6.5.1.SPC200,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.SPC100

ManageOne;SMC2.0 V600R019C10SPC700,V600R019C10SPC702,V600R019C10SPC703,V600R019C10SPC800,V600R019C10SPC900,V600R019C10SPC910,V600R019C10SPC920,V600R019C10SPC921,V600R019C10SPC922,V600R019C10SPC930,V600R019C10SPC931

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.