CVE-2021-37102

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0.

• CWE-77

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-cmd-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-cmd-enVendor Advisory

Published

Nov 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37097There is a Code Injection vulnerability in Huawei Smartphone…7.5
• CVE-2021-37098Hilinksvc service exists a Data Processing Errors vulnerabil…7.5
• CVE-2021-37099There is a Path Traversal vulnerability in Huawei Smartphone…9.1
• CVE-2021-3710An information disclosure via path traversal was discovered …5.5
• CVE-2021-37100There is a Improper Authentication vulnerability in Huawei S…7.5
• CVE-2021-37101There is an improper authorization vulnerability in AIS-BW50…6.8
• CVE-2021-37103There is an improper permission management vulnerability in …5.5
• CVE-2021-37104There is a server-side request forgery vulnerability in HUAW…7.5
• CVE-2021-37105There is an improper file upload control vulnerability in Fu…7.5
• CVE-2021-37106There is a command injection vulnerability in CMA service mo…7.2
• CVE-2021-37107There is an improper memory access permission configuration …5.5
• CVE-2021-37109There is a security protection bypass vulnerability with the…7.8