CVE-2021-37106

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Sep 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371075.5There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds acCVE-2021-371097.8There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protectionCVE-2021-37119.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application willCVE-2021-371107.5There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371117.5There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-371125.3Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may leaCVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability mayCVE-2021-371145.3There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371155.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-371169.1PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tCVE-2021-371177.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-371185.3The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may le
CVE-2021-37106: High severity, CVSS 7.2 | Vulnix