Threat Investigation
Request a demo

CVE-2021-37123

Critical

Description

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.

SeverityCritical
CVSS9.8
Exploit probability—
ProductHuawei Hero-ct060 Firmware
PublishedOct 11, 2021
First seenOct 11, 2021

How to fix

Update
  • huawei hero-ct060_firmware1.0.0.200 or later

Affected products

ProductAffected versionsFixed in
huawei hero-ct060_firmwarev < 1.0.0.2001.0.0.200

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.