CVE-2021-37105

—

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Sep 28, 2021 (Sep 28, 2021)

Modified

Jun 17, 2026

Description

There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.

Vendors: huawei
Products: fusioncompute
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.