Read the docs
TI-2021-05313 Aliases CVE-2021-22339GHSA-p26q-mrh9-9652

Insufficient verification of data authenticity in ManageOne

Priority LOW 29CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-345.

Summary

There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal.

Why it matters now

EPSS 0.00283 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ManageOne6.5.0,6.5.0.SPC100.B210,6.5.0.SPC100.B220,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC1.B070,6.5.1RC1.B080,6.5.1RC2.B010,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100—No fix listedCNA
  • ManageOne Vendor— Affected 6.5.0,6.5.0.SPC100.B210,6.5.0.SPC100.B220,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC1.B070,6.5.1RC1.B080,6.5.1RC2.B010,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100 Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5:rc2.b050:*:*:*:*:*:*6.5 rc2.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.0:-:*:*:*:*:*:*6.5.0VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.0:spc100.b210:*:*:*:*:*:*6.5.0 spc100.b210VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.0:spc100.b220:*:*:*:*:*:*6.5.0 spc100.b220VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:*6.5.1 rc1.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc1.b070:*:*:*:*:*:*6.5.1 rc1.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc1.b080:*:*:*:*:*:*6.5.1 rc1.b080VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b010:*:*:*:*:*:*6.5.1 rc2.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:*6.5.1 rc2.b020VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:*6.5.1 rc2.b030VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5:rc2.b050:*:*:*:*:*:* Versions 6.5 rc2.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.0:-:*:*:*:*:*:* Versions 6.5.0 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.0:spc100.b210:*:*:*:*:*:* Versions 6.5.0 spc100.b210 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.0:spc100.b220:*:*:*:*:*:* Versions 6.5.0 spc100.b220 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:* Versions 6.5.1 rc1.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc1.b070:*:*:*:*:*:* Versions 6.5.1 rc1.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc1.b080:*:*:*:*:*:* Versions 6.5.1 rc1.b080 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b010:*:*:*:*:*:* Versions 6.5.1 rc2.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:* Versions 6.5.1 rc2.b020 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:* Versions 6.5.1 rc2.b030 Vulnerable ·Huawei
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:*6.5.1 rc2.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:*6.5.1 rc2.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:*6.5.1 rc2.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:*6.5.1 rc2.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b080:*:*:*:*:*:*6.5.1 rc2.b080VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:*6.5.1 rc2.b090VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc100.b050:*:*:*:*:*:*6.5.1 spc100.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc101.b010:*:*:*:*:*:*6.5.1 spc101.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc101.b040:*:*:*:*:*:*6.5.1 spc101.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200:*:*:*:*:*:*6.5.1 spc200VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b010:*:*:*:*:*:*6.5.1 spc200.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b030:*:*:*:*:*:*6.5.1 spc200.b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b040:*:*:*:*:*:*6.5.1 spc200.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b050:*:*:*:*:*:*6.5.1 spc200.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b060:*:*:*:*:*:*6.5.1 spc200.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:spc200.b070:*:*:*:*:*:*6.5.1 spc200.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:*6.5.1.1 b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*6.5.1.1 b020VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*6.5.1.1 b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*6.5.1.1 b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:*8.0.0VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:*8.0.0 lcnd81VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:*8.0.0 rc2VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:*8.0.0 rc3VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc3.b041:*:*:*:*:*:*8.0.0 rc3.b041VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc3.spc100:*:*:*:*:*:*8.0.0 rc3.spc100VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:*8.0.0 spc100VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:*8.0.1VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:* Versions 6.5.1 rc2.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:* Versions 6.5.1 rc2.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:* Versions 6.5.1 rc2.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:* Versions 6.5.1 rc2.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b080:*:*:*:*:*:* Versions 6.5.1 rc2.b080 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:* Versions 6.5.1 rc2.b090 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc100.b050:*:*:*:*:*:* Versions 6.5.1 spc100.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc101.b010:*:*:*:*:*:* Versions 6.5.1 spc101.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc101.b040:*:*:*:*:*:* Versions 6.5.1 spc101.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200:*:*:*:*:*:* Versions 6.5.1 spc200 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b010:*:*:*:*:*:* Versions 6.5.1 spc200.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b030:*:*:*:*:*:* Versions 6.5.1 spc200.b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b040:*:*:*:*:*:* Versions 6.5.1 spc200.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b050:*:*:*:*:*:* Versions 6.5.1 spc200.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b060:*:*:*:*:*:* Versions 6.5.1 spc200.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:spc200.b070:*:*:*:*:*:* Versions 6.5.1 spc200.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:* Versions 6.5.1.1 b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:* Versions 6.5.1.1 b020 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:* Versions 6.5.1.1 b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:* Versions 6.5.1.1 b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:* Versions 8.0.0 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:* Versions 8.0.0 lcnd81 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:* Versions 8.0.0 rc2 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:* Versions 8.0.0 rc3 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc3.b041:*:*:*:*:*:* Versions 8.0.0 rc3.b041 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc3.spc100:*:*:*:*:*:* Versions 8.0.0 rc3.spc100 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:* Versions 8.0.0 spc100 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:* Versions 8.0.1 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-22339
  2. 2026-10-03 Alias added: GHSA-p26q-mrh9-9652

References

Advisory 1

  • TI-2021-05269 Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. CVSS 3.1HIGH 7.5
  • TI-2019-11040 Buffer overflow in Linux kernel CVSS 3.1HIGH 7.8
  • TI-2021-05274 There is a local privilege escalation vulnerability in some Huawei products. CVSS 3.1HIGH 7.8
  • TI-2020-07326 Improper input validation in ManageOne CVSS 3.1HIGH 7.2
  • TI-2019-03718 Out-of-bounds read in ManageOne CVSS 3.1HIGH 7.5
  • TI-2021-05289 There is a local privilege escalation vulnerability in some versions of ManageOne. CVSS 3.1HIGH 7.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences