CVE-2021-22439

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfully exploiting this vulnerability, the attacker can execute remote malicious code injection and to control the device.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Jun 29, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-224410.0Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider ServicesCVE-2021-224404.6There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to constrCVE-2021-224415.5Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.CVE-2021-224427.5There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability maCVE-2021-224437.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address accCVE-2021-224449.8There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.CVE-2021-224457.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reseCVE-2021-224467.5There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to CVE-2021-224477.5There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabCVE-2021-224489.1There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read anCVE-2021-224497.5There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulneraCVE-2021-22452.7Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are aff
CVE-2021-22439: High severity, CVSS 8.1 | Vulnix