CVE-2021-33658: Huawei Atune

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.

Affected products

• Huawei Atune: from 0.3, up to and including 0.8

Published 2022-03-11. Last modified 2026-06-17.