CVE-2021-37130: Huawei Fusioncube Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename.

Affected products

• Huawei Fusioncube Firmware: version 6.0.2 only

Published 2021-10-27. Last modified 2026-06-17.