CVE-2021-37028

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with administrator privilege could execute part of commands.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-370295.3There is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availaCVE-2021-37037.5It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16CVE-2021-370307.5There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabiCVE-2021-370317.5There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedCVE-2021-370325.3There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to workCVE-2021-370337.5There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabilitCVE-2021-370347.5There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentialityCVE-2021-370357.5There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedCVE-2021-370365.5There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage CVE-2021-370377.5There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to CVE-2021-370387.5There is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confCVE-2021-370396.5There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.
CVE-2021-37028: Medium severity, CVSS 6.7 | Vulnix