CVE-2021-37105

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Sep 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371067.2There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default CVE-2021-371075.5There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds acCVE-2021-371097.8There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protectionCVE-2021-37119.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application willCVE-2021-371107.5There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371117.5There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-371125.3Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may leaCVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability mayCVE-2021-371145.3There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371155.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-371169.1PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tCVE-2021-371177.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
CVE-2021-37105: High severity, CVSS 7.5 | Vulnix