CVE-2021-36982

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369837.8replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tCVE-2021-369857.5There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and CVE-2021-369869.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisCVE-2021-369875.9There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploiCVE-2021-369887.5There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.CVE-2021-369899.8There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.CVE-2021-369909.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisCVE-2021-369917.5There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulCVE-2021-369927.5There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confiCVE-2021-369937.5There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.CVE-2021-369943.7There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. SuccessfCVE-2021-369957.5There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft link
CVE-2021-36982: High severity, CVSS 8.1 | Vulnix