Read the docs
TI-2021-05273 Aliases CVE-2021-22298GHSA-hphj-4pmp-q6gf

There is a logic vulnerability in Huawei Gauss100 OLTP Product.

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.

Why it matters now

EPSS 0.00925 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ManageOne6.5.1.1.B020,6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090—No fix listedCNA
  • ManageOne Vendor— Affected 6.5.1.1.B020,6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090 Fixed in — No fix listed CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*6.5.1.1 b020VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*6.5.1.1 b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*6.5.1.1 b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b070:*:*:*:*:*:*6.5.1.1 rc1.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b080:*:*:*:*:*:*6.5.1.1 rc1.b080VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b040:*:*:*:*:*:*6.5.1.1 rc2.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b050:*:*:*:*:*:*6.5.1.1 rc2.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b060:*:*:*:*:*:*6.5.1.1 rc2.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b070:*:*:*:*:*:*6.5.1.1 rc2.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b080:*:*:*:*:*:*6.5.1.1 rc2.b080VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:* Versions 6.5.1.1 b020 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:* Versions 6.5.1.1 b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:* Versions 6.5.1.1 b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b070:*:*:*:*:*:* Versions 6.5.1.1 rc1.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b080:*:*:*:*:*:* Versions 6.5.1.1 rc1.b080 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b040:*:*:*:*:*:* Versions 6.5.1.1 rc2.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b050:*:*:*:*:*:* Versions 6.5.1.1 rc2.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b060:*:*:*:*:*:* Versions 6.5.1.1 rc2.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b070:*:*:*:*:*:* Versions 6.5.1.1 rc2.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b080:*:*:*:*:*:* Versions 6.5.1.1 rc2.b080 Vulnerable ·Huawei
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b090:*:*:*:*:*:*6.5.1.1 rc2.b090VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:*6.5.1.1 spc100.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:*6.5.1.1 spc101.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:*6.5.1.1 spc101.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*6.5.1.1 spc200VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:*6.5.1.1 spc200.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:*6.5.1.1 spc200.b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:*6.5.1.1 spc200.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:*6.5.1.1 spc200.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:*6.5.1.1 spc200.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:*6.5.1.1 spc200.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:*8.0.0VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b090:*:*:*:*:*:* Versions 6.5.1.1 rc2.b090 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:* Versions 6.5.1.1 spc100.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:* Versions 6.5.1.1 spc101.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:* Versions 6.5.1.1 spc101.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:* Versions 6.5.1.1 spc200 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:* Versions 6.5.1.1 spc200.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:* Versions 6.5.1.1 spc200.b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:* Versions 6.5.1.1 spc200.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:* Versions 6.5.1.1 spc200.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:* Versions 6.5.1.1 spc200.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:* Versions 6.5.1.1 spc200.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:* Versions 8.0.0 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-22298
  2. 2026-10-03 Alias added: GHSA-hphj-4pmp-q6gf

References

Advisory 2

  • TI-2021-05269 Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. CVSS 3.1HIGH 7.5
  • TI-2019-11040 Buffer overflow in Linux kernel CVSS 3.1HIGH 7.8
  • TI-2021-05274 There is a local privilege escalation vulnerability in some Huawei products. CVSS 3.1HIGH 7.8
  • TI-2020-07326 Improper input validation in ManageOne CVSS 3.1HIGH 7.2
  • TI-2019-03718 Out-of-bounds read in ManageOne CVSS 3.1HIGH 7.5
  • TI-2021-05289 There is a local privilege escalation vulnerability in some versions of ManageOne. CVSS 3.1HIGH 7.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences