What’s Vulnerable › Vulnerabilities

CVE-2021-22449

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-23 · updated 2026-06-17

Description

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device.

Affected products

• Elf-G10HN: 1.0.0.608

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-logic-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-logic-en

Get alerted when CVE-2021-22449 or the next vulnerability affects your stack