CVE-2021-37106

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.

• CWE-77

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-commandinjection-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-commandinjection-enVendor Advisory

Published

Sep 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37100There is a Improper Authentication vulnerability in Huawei S…7.5
• CVE-2021-37101There is an improper authorization vulnerability in AIS-BW50…6.8
• CVE-2021-37102There is a command injection vulnerability in CMA service mo…8.8
• CVE-2021-37103There is an improper permission management vulnerability in …5.5
• CVE-2021-37104There is a server-side request forgery vulnerability in HUAW…7.5
• CVE-2021-37105There is an improper file upload control vulnerability in Fu…7.5
• CVE-2021-37107There is an improper memory access permission configuration …5.5
• CVE-2021-37109There is a security protection bypass vulnerability with the…7.8
• CVE-2021-3711In order to decrypt SM2 encrypted data an application is exp…9.8
• CVE-2021-37110There is a Timing design defects in Smartphone.Successful ex…7.5
• CVE-2021-37111There is a Memory leakage vulnerability in Smartphone.Succes…7.5
• CVE-2021-37112Hisuite module has a External Control of System or Configura…5.3