CVE-2021-22449

HIGH 7.5CVE-2021-22449 · Published 23/08/2021 · updated 17/06/2026

In short

CVE-2021-22449 is a HIGH (CVSS 7.5) vulnerability affecting elf-g10hn (huawei).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
elf-g10hn huawei	`= 1.0.0.608`	No fix yet

Description

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device.

References

huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-logic-en · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free