CVE-2021-37028: There is a command injection vulnerability in the HG8045Q product.

Security readout for executives and security teams

CVE-2021-37028 affects Huawei EchoLife HG8045Q devices. If the command-line interface is enabled, an administrator-level attacker could inject and execute parts of commands. The CLI is disabled by default, so urgency depends on whether affected devices are present, CLI is enabled, and admin access is exposed or compromised. Exposure is most likely in carrier, ISP, or enterprise environments using the affected HG8045Q firmware versions with CLI enabled. Risk increases where device administration is reachable from broad networks, shared admin credentials are used, or remote management is insufficiently restricted. Treat this as a targeted configuration-dependent device risk, not a broad emergency from the supplied evidence. Prioritize asset discovery and admin-interface hardening, then follow Huawei guidance for updates or mitigations. Mitigation focus: Inventory HG8045Q devices and identify affected firmware versions.; Keep the command-line interface disabled unless operationally required.; Restrict administrator access to trusted management networks and accounts..

Prepared

Jun 2, 2026, 19:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.