CVE-2021-39976

There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211103-01-privilege-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211103-01-privilege-enVendor Advisory

Published

Nov 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39970HwPCAssistant has a Improper Input Validation vulnerability.…7.5
• CVE-2021-39971Password vault has a External Control of System or Configura…7.5
• CVE-2021-39972MyHuawei-App has a Exposure of Sensitive Information to an U…7.5
• CVE-2021-39973There is a Null pointer dereference in Smartphones.Successfu…7.5
• CVE-2021-39974There is an Out-of-bounds read in Smartphones.Successful exp…7.5
• CVE-2021-39975Hilinksvc has a Data Processing Errors vulnerability.Success…7.5
• CVE-2021-39977The HwNearbyMain module has a NULL Pointer Dereference vulne…7.5
• CVE-2021-39978Telephony application has a SQL Injection vulnerability.Succ…7.5
• CVE-2021-39979HHEE system has a Code Injection vulnerability.Successful ex…9.8
• CVE-2021-3998A flaw was found in glibc. The realpath() function can mista…7.5
• CVE-2021-39980Telephony application has a Exposure of Sensitive Informatio…5.3
• CVE-2021-39981Chang Lian application has a vulnerability which can be mali…5.3