CVE-2021-22377: Huawei s12700 Firmware

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service.

Affected products

• Huawei s12700 Firmware: version v200r019c00spc500 only
• Huawei s2700 Firmware: version v200r019c00spc500 only
• Huawei s5700 Firmware: version v200r019c00spc500 only
• Huawei s6700 Firmware: version v200r019c00spc500 only
• Huawei s7700 Firmware: version v200r019c00spc500 only

Published 2021-06-22. Last modified 2026-06-17.