CVE-2021-22293

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-06 · updated 2026-06-17
Weakness: CWE-444

Description

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1).

Affected products

CampusInsight: v100r019c10
ManageOne: 6.5.1.1, 6.5.1.1-rc1, 6.5.1.1-rc2, 6.5.1.1-spc100, 6.5.1.1-spc200, 8.0.0-rc2
Taurus-AL00A: 10.0.0.1(c00e1r1p1)

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en

Get alerted when CVE-2021-22293 or the next vulnerability affects your stack