CVE-2021-22377

Name of the Vulnerable Software and Affected Versions: S12700 version V200R019C00SPC500 S2700 version V200R019C00SPC500 S5700 version V200R019C00SPC500 S6700 version V200R019C00SPC500 S7700 version V200R019C00SPC500

Description: There is a command injection issue in certain Huawei products. A module does not verify specific input sufficiently, allowing attackers to exploit this by sending malicious parameters to inject commands. This can compromise normal service.

Recommendations: For S12700 version V200R019C00SPC500, update to a version that includes the fix for this issue. For S2700 version V200R019C00SPC500, update to a version that includes the fix for this issue. For S5700 version V200R019C00SPC500, update to a version that includes the fix for this issue. For S6700 version V200R019C00SPC500, update to a version that includes the fix for this issue. For S7700 version V200R019C00SPC500, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the module that does not verify specific input sufficiently until a patch is available.