Command Injection Vulnerability in Huawei Switches

CVE-2021-22377

What is CVE-2021-22377?

A command injection vulnerability has been identified in specific Huawei switch models where insufficient input validation allows attackers to manipulate command execution. By sending specially crafted parameters, an attacker could inject commands that compromise the normal operation of the device. This can lead to unauthorized access and service disruptions, highlighting the need for prompt security measures to mitigate potential risks. It is crucial for organizations utilizing affected models to stay informed and apply the relevant patches provided by Huawei.

References