CVE-2021-22439

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfully exploiting this vulnerability, the attacker can execute remote malicious code injection and to control the device.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
n/a	AnyOffice	V200R006C10

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210619-01-injection-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210619-01-injection-enVendor Advisory

Timeline

Published: Jun 29, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-224410.0Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider Services CVE-2021-224404.6There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to constr CVE-2021-224415.5Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.CVE-2021-224427.5There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma CVE-2021-224437.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address acc CVE-2021-224449.8There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.CVE-2021-224457.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to rese CVE-2021-224467.5There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to CVE-2021-224477.5There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab CVE-2021-224489.1There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read an CVE-2021-224497.5There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnera CVE-2021-22452.7Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are aff