CVE-2021-37124

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-27 · updated 2026-06-17
Weakness: CWE-22

Description

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.

Affected products

Huawei Pc Smart Full Scene: 11.1
Huawei PCManager: 11.1.1.97

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211008-01-share-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211008-01-share-en

Get alerted when CVE-2021-37124 or the next vulnerability affects your stack