Read the docs
TI-2021-15204 Aliases CVE-2021-37131GHSA-m386-mvxc-mmq3

CSV injection in ManageOne;iManager NetEco;iManager NetEco 6000

Priority LOW 31CWE-1236Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.

Why it matters now

EPSS 0.0058 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ManageOne;iManager NetEco;iManager NetEco 60006.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC1.B070,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B090,8.0.0,8.0.0-LCN080,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3; V600R010C00CP2001,V600R010C00CP2002,V600R010C00CP3001,V600R010C00CP3002,V600R010C00CP3101,V600R010C00CP3102,V600R010C00SPC100,V600R010C00SPC110,V600R010C00SPC120,V600R010C00SPC200,V600R010C00SPC210,V600R010C00SPC300,V600R010C00SPC310; V600R009C00CP2201,V600R009C00CP2301,V600R009C00SPC100,V600R009C00SPC110,V600R009C00SPC120,V600R009C00SPC190,V600R009C00SPC200,V600R009C00SPC201,V600R009C00SPC202,V600R009C00SPC210,V600R009C00SPC220,V600R009C00SPC221,V600R009C00SPC230,V600R009C00SPC232—No fix listedCNA
  • ManageOne;iManager NetEco;iManager NetEco 6000 Vendor— Affected 6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC1.B070,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B090,8.0.0,8.0.0-LCN080,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3; V600R010C00CP2001,V600R010C00CP2002,V600R010C00CP3001,V600R010C00CP3002,V600R010C00CP3101,V600R010C00CP3102,V600R010C00SPC100,V600R010C00SPC110,V600R010C00SPC120,V600R010C00SPC200,V600R010C00SPC210,V600R010C00SPC300,V600R010C00SPC310; V600R009C00CP2201,V600R009C00CP2301,V600R009C00SPC100,V600R009C00SPC110,V600R009C00SPC120,V600R009C00SPC190,V600R009C00SPC200,V600R009C00SPC201,V600R009C00SPC202,V600R009C00SPC210,V600R009C00SPC220,V600R009C00SPC221,V600R009C00SPC230,V600R009C00SPC232 Fixed in — No fix listed CNA

CPE configurations NVD · 57

CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:*6.5.1 rc1.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc1.b070:*:*:*:*:*:*6.5.1 rc1.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:*6.5.1 rc2.b020VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:*6.5.1 rc2.b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:*6.5.1 rc2.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:*6.5.1 rc2.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:*6.5.1 rc2.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:*6.5.1 rc2.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:*6.5.1 rc2.b090VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:*6.5.1.1 b010VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:* Versions 6.5.1 rc1.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc1.b070:*:*:*:*:*:* Versions 6.5.1 rc1.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:* Versions 6.5.1 rc2.b020 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:* Versions 6.5.1 rc2.b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:* Versions 6.5.1 rc2.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:* Versions 6.5.1 rc2.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:* Versions 6.5.1 rc2.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:* Versions 6.5.1 rc2.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:* Versions 6.5.1 rc2.b090 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:* Versions 6.5.1.1 b010 Vulnerable ·Huawei
Show 47 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*6.5.1.1 b020VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*6.5.1.1 b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*6.5.1.1 b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:*6.5.1.1 spc100.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:*6.5.1.1 spc101.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:*6.5.1.1 spc101.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*6.5.1.1 spc200VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:*6.5.1.1 spc200.b010VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:*6.5.1.1 spc200.b030VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:*6.5.1.1 spc200.b040VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:*6.5.1.1 spc200.b050VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:*6.5.1.1 spc200.b060VulnerableHuawei
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:*6.5.1.1 spc200.b070VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:*8.0.0VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:lcn080:*:*:*:*:*:*8.0.0 lcn080VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:*8.0.0 lcnd81VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:*8.0.0 rc2VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:*8.0.0 rc3VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:*8.0.0 spc100VulnerableHuawei
cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:*8.0.1VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp2001:*:*:*:*:*:*:*v600r010c00cp2001VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp2002:*:*:*:*:*:*:*v600r010c00cp2002VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3001:*:*:*:*:*:*:*v600r010c00cp3001VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3002:*:*:*:*:*:*:*v600r010c00cp3002VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3101:*:*:*:*:*:*:*v600r010c00cp3101VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3102:*:*:*:*:*:*:*v600r010c00cp3102VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc100:*:*:*:*:*:*:*v600r010c00spc100VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc110:*:*:*:*:*:*:*v600r010c00spc110VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc120:*:*:*:*:*:*:*v600r010c00spc120VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc200:*:*:*:*:*:*:*v600r010c00spc200VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc210:*:*:*:*:*:*:*v600r010c00spc210VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc300:*:*:*:*:*:*:*v600r010c00spc300VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc310:*:*:*:*:*:*:*v600r010c00spc310VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00cp2201:*:*:*:*:*:*:*v600r009c00cp2201VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00cp2301:*:*:*:*:*:*:*v600r009c00cp2301VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc100:*:*:*:*:*:*:*v600r009c00spc100VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc110:*:*:*:*:*:*:*v600r009c00spc110VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc120:*:*:*:*:*:*:*v600r009c00spc120VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc190:*:*:*:*:*:*:*v600r009c00spc190VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc200:*:*:*:*:*:*:*v600r009c00spc200VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc201:*:*:*:*:*:*:*v600r009c00spc201VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc202:*:*:*:*:*:*:*v600r009c00spc202VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc210:*:*:*:*:*:*:*v600r009c00spc210VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc220:*:*:*:*:*:*:*v600r009c00spc220VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc221:*:*:*:*:*:*:*v600r009c00spc221VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc230:*:*:*:*:*:*:*v600r009c00spc230VulnerableHuawei
cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc232:*:*:*:*:*:*:*v600r009c00spc232VulnerableHuawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:* Versions 6.5.1.1 b020 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:* Versions 6.5.1.1 b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:* Versions 6.5.1.1 b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:* Versions 6.5.1.1 spc100.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:* Versions 6.5.1.1 spc101.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:* Versions 6.5.1.1 spc101.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:* Versions 6.5.1.1 spc200 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:* Versions 6.5.1.1 spc200.b010 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:* Versions 6.5.1.1 spc200.b030 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:* Versions 6.5.1.1 spc200.b040 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:* Versions 6.5.1.1 spc200.b050 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:* Versions 6.5.1.1 spc200.b060 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:* Versions 6.5.1.1 spc200.b070 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:* Versions 8.0.0 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:lcn080:*:*:*:*:*:* Versions 8.0.0 lcn080 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:* Versions 8.0.0 lcnd81 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:* Versions 8.0.0 rc2 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:* Versions 8.0.0 rc3 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:* Versions 8.0.0 spc100 Vulnerable ·Huawei
  • cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:* Versions 8.0.1 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp2001:*:*:*:*:*:*:* Versions v600r010c00cp2001 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp2002:*:*:*:*:*:*:* Versions v600r010c00cp2002 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3001:*:*:*:*:*:*:* Versions v600r010c00cp3001 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3002:*:*:*:*:*:*:* Versions v600r010c00cp3002 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3101:*:*:*:*:*:*:* Versions v600r010c00cp3101 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00cp3102:*:*:*:*:*:*:* Versions v600r010c00cp3102 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc100:*:*:*:*:*:*:* Versions v600r010c00spc100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc110:*:*:*:*:*:*:* Versions v600r010c00spc110 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc120:*:*:*:*:*:*:* Versions v600r010c00spc120 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc200:*:*:*:*:*:*:* Versions v600r010c00spc200 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc210:*:*:*:*:*:*:* Versions v600r010c00spc210 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc300:*:*:*:*:*:*:* Versions v600r010c00spc300 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco:v600r010c00spc310:*:*:*:*:*:*:* Versions v600r010c00spc310 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00cp2201:*:*:*:*:*:*:* Versions v600r009c00cp2201 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00cp2301:*:*:*:*:*:*:* Versions v600r009c00cp2301 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc100:*:*:*:*:*:*:* Versions v600r009c00spc100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc110:*:*:*:*:*:*:* Versions v600r009c00spc110 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc120:*:*:*:*:*:*:* Versions v600r009c00spc120 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc190:*:*:*:*:*:*:* Versions v600r009c00spc190 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc200:*:*:*:*:*:*:* Versions v600r009c00spc200 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc201:*:*:*:*:*:*:* Versions v600r009c00spc201 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc202:*:*:*:*:*:*:* Versions v600r009c00spc202 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc210:*:*:*:*:*:*:* Versions v600r009c00spc210 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc220:*:*:*:*:*:*:* Versions v600r009c00spc220 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc221:*:*:*:*:*:*:* Versions v600r009c00spc221 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc230:*:*:*:*:*:*:* Versions v600r009c00spc230 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:imanager_neteco_6000:v600r009c00spc232:*:*:*:*:*:*:* Versions v600r009c00spc232 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-37131
  2. 2026-10-03 Alias added: GHSA-m386-mvxc-mmq3

References

Sources