CVE-2021-37127

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product versions include:iManager NetEco V600R010C00CP2001,V600R010C00CP2002,V600R010C00SPC100,V600R010C00SPC110,V600R010C00SPC120,V600R010C00SPC200,V600R010C00SPC210,V600R010C00SPC300;iManager NetEco 6000 V600R009C00SPC100,V600R009C00SPC110,V600R009C00SPC120,V600R009C00SPC190,V600R009C00SPC200,V600R009C00SPC201,V600R009C00SPC202,V600R009C00SPC210.

• CWE-347

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211020-01-signature-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211020-01-signature-enVendor Advisory

Published

Oct 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37121There is a Configuration defects in Smartphone.Successful ex…9.8
• CVE-2021-37122There is a use-after-free (UAF) vulnerability in Huawei prod…6.5
• CVE-2021-37123There is an improper authentication vulnerability in Hero-CT…9.8
• CVE-2021-37124There is a path traversal vulnerability in Huawei PC product…6.5
• CVE-2021-37125Arbitrary file has a Exposure of Sensitive Information to an…7.5
• CVE-2021-37126Arbitrary file has a Exposure of Sensitive Information to an…7.5
• CVE-2021-37128HwPCAssistant has a Path Traversal vulnerability .Successful…9.8
• CVE-2021-37129There is an out of bounds write vulnerability in some Huawei…7.5
• CVE-2021-3713An out-of-bounds write flaw was found in the UAS (USB Attach…7.4
• CVE-2021-37130There is a path traversal vulnerability in Huawei FusionCube…7.5
• CVE-2021-37131There is a CSV injection vulnerability in ManageOne, iManage…6.8
• CVE-2021-37132PackageManagerService has a Permissions, Privileges, and Acc…5.3