CVE-2021-37123

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Oct 11, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-371246.5There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can CVE-2021-371257.5Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability CVE-2021-371267.5Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability CVE-2021-371277.2There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. Durin CVE-2021-371289.8HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.CVE-2021-371297.5There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not p CVE-2021-37137.4An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device use CVE-2021-371307.5There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to cons CVE-2021-371316.8There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit t CVE-2021-371325.3PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may ca CVE-2021-371337.5There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confident CVE-2021-371348.1Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for inv