CVE-2021-37123
Last modified
CVE-2021-37123 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. EPSS estimates a 0.79% chance of exploitation in the next 30 days.
Description
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Hero-Ct060 Firmware | < 1.0.0.200 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-37123?
How severe is CVE-2021-37123?
How do I fix CVE-2021-37123?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-37118The HwNearbyMain module has a Improper Handling of Exception…5.3
- CVE-2021-37119There is a Service logic vulnerability in Smartphone.Success…7.5
- CVE-2021-3712ASN.1 strings are represented internally within OpenSSL as a…7.4
- CVE-2021-37120There is a Double free vulnerability in Smartphone.Successfu…9.8
- CVE-2021-37121There is a Configuration defects in Smartphone.Successful ex…9.8
- CVE-2021-37122There is a use-after-free (UAF) vulnerability in Huawei prod…6.5
- CVE-2021-37124There is a path traversal vulnerability in Huawei PC product…6.5
- CVE-2021-37125Arbitrary file has a Exposure of Sensitive Information to an…7.5
- CVE-2021-37126Arbitrary file has a Exposure of Sensitive Information to an…7.5
- CVE-2021-37127There is a signature management vulnerability in some huawei…7.2
- CVE-2021-37128HwPCAssistant has a Path Traversal vulnerability .Successful…9.8
- CVE-2021-37129There is an out of bounds write vulnerability in some Huawei…7.5
Are you affected by CVE-2021-37123?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST